VYPR

libslirp

by Red Hat

CVEs (1)

  • CVE-2026-95508HigSep 22, 2026
    risk 0.48cvss 7.4epss 0.01

    A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and…