CVE-2025-11964
Low
Description
On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the end of the provided buffer.
SeverityLow
CVSS1.9
Exploit probability—
ProductThe Tcpdump Group Libpcap
PublishedDec 31, 2025
First seenDec 31, 2025
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- The Tcpdump Group libpcap1.10.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| The Tcpdump Group libpcap | 1.10.0 ≤ v < 1.10.6 | 1.10.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.