CVE-2026-13587 | seladb PcapPlusPlus 25.05 LightPcapNg Parser light_pcapng.c parse_by_block_type captured_packet_length heap-based overflow (Issue 2149)

A vulnerability was found in seladb PcapPlusPlus 25.05. It has been classified as critical. The affected element is the function parse_by_block_type of the file light_pcapng.c of the component LightPcapNg Parser. Performing a manipulation of the argument captured_packet_length results in heap-based buffer overflow.

This vulnerability is cataloged as CVE-2026-13587. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.