tag
Integer-Wraparound
None assigned as of 2026-07-03
network
LOW
Nmap IPv6 Extension-Header Length Wrap
The Nmap IPv6 extension-header parser in libnetutil/netutil.cc advances a payload pointer by an attacker-declared extension-header length without first checking that the advanced pointer stays within the bounds of the captured packet. When a crafted,…
Unverified
2026-07-03