CVE-2026-13590 | seladb PcapPlusPlus 25.05 Modbus Protocol ModbusLayer.h getLength length heap-based overflow (Issue 2155)

A vulnerability categorized as critical has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength in the library Packet++/header/ModbusLayer.h of the component Modbus Protocol Handler. The manipulation of the argument length results in heap-based buffer overflow.

This vulnerability is reported as CVE-2026-13590. The attack can be launched remotely. Moreover, an exploit is present.

Applying a patch is advised to resolve this issue.