CVE-2026-13588 | seladb PcapPlusPlus 25.05 TLS Hello SSLHandshake.cpp getHandshakeVersion handshakeVersion heap-based overflow (Issue 2151)

A vulnerability was found in seladb PcapPlusPlus 25.05. It has been declared as critical. The impacted element is the function pcpp::SSLClientHelloMessage::getHandshakeVersion of the file Packet++/src/SSLHandshake.cpp of the component TLS Hello Handler. Executing a manipulation of the argument handshakeVersion can lead to heap-based buffer overflow.

This vulnerability is registered as CVE-2026-13588. It is possible to launch the attack remotely. Furthermore, an exploit is available.

It is best practice to apply a patch to resolve this issue.