{"id":"CVE-2025-11964","summary":"OOBW in utf_16le_to_utf_8_truncated() in libpcap","details":"On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the end of the provided buffer.","modified":"2026-08-12T14:52:30.314303Z","published":"2025-12-31T00:58:19.026Z","database_specific":{"cna_assigner":"Tcpdump","cwe_ids":["CWE-787"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/11xxx/CVE-2025-11964.json"},"references":[{"type":"WEB","url":"https://github.com/the-tcpdump-group/libpcap/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/11xxx/CVE-2025-11964.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11964"},{"type":"FIX","url":"https://github.com/the-tcpdump-group/libpcap/commit/7fabf607f2319a36a0bd78444247180acb838e69"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/the-tcpdump-group/libpcap","events":[{"introduced":"ef0762f2f880d5b176d4f6146c567e2a6dd44637"},{"fixed":"7fabf607f2319a36a0bd78444247180acb838e69"}],"database_specific":{"extracted_events":[{"introduced":"1.10.0"},{"fixed":"1.10.6"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["libpcap-1.10.5","libpcap-1.10.4","libpcap-1.10.3","libpcap-1.10.2","libpcap-1.10.1","libpcap-1.10.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-11964.json","vanir_signatures_modified":"2026-08-12T14:52:30Z","vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://github.com/the-tcpdump-group/libpcap/commit/7fabf607f2319a36a0bd78444247180acb838e69","target":{"file":"fmtutils.c"},"deprecated":false,"digest":{"line_hashes":["105413501093099000177504737593665485571","238539772435896871749861325614534390535","308634017951984110653427438898181624682","286765428450918210346252275733749370223"],"threshold":0.9},"id":"CVE-2025-11964-0556082a"},{"signature_version":"v1","source":"https://github.com/the-tcpdump-group/libpcap/commit/7fabf607f2319a36a0bd78444247180acb838e69","target":{"file":"fmtutils.c","function":"utf_16le_to_utf_8_truncated"},"deprecated":false,"digest":{"function_hash":"48150353148794074420133864590076316976","length":1239},"id":"CVE-2025-11964-c57b6e8f","signature_type":"Function"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N"}]}