Buffer Overflow Vulnerability in libpcap on Windows Systems

CVE-2025-11964

What is CVE-2025-11964?

A buffer overflow vulnerability exists in libpcap for Windows, arising when the library attempts to convert certain error messages to UTF-8 format. In particular, if the error messages contain characters represented in UTF-8 using 4 bytes, the function utf_16le_to_utf_8_truncated() may inadvertently write data beyond the allocated memory buffer. This flaw poses a risk of potential data corruption or application crashes, underlining the importance of applying the latest updates to mitigate such security issues.

References