Low severity · published Dec 31, 2025
CVE-2025-11964
OOBW in utf_16le_to_utf_8_truncated() in libpcap
1.9
CVSS
0.1%
EPSS
No
On KEV
Description
On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the end of the provided buffer.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
Attack vector
Local
Complexity
High
Privileges
High
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
libpcap · The Tcpdump Group
1.10.0 before 1.10.6 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-11964
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-11964
github.com
https://github.com/the-tcpdump-group/libpcap/commit/7fabf607f2319a36a0bd78444247180acb838e69
More from libpcap
8.7
CVE-2026-0799
OOBR and OOBW in libpcap before 1.10.7
7.5
CVE-2026-6554
infinte loop in libpcap before 1.10.7
5.5
CVE-2026-6244
division by zero in libpcap before 1.10.7
5.5
CVE-2026-31911
abort() in libpcap before 1.10.7 on an invalid BPF opcode
5.5
CVE-2026-31912
OOBR in libpcap before 1.10.7