CVE-2026-48682

FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the IPv4 packet parser. In src/simple_packet_parser_ng.cpp, after validating that the packet contains at least sizeof(ipv4_header_t) bytes (20 bytes), the code advances the local_pointer by '4 * ipv4_header->get_ihl()' (line 164) without validating that (a) IHL >= 5 (the minimum valid value per RFC 791), or (b) 4 * IHL bytes are actually available in the packet. The IHL field is 4 bits, allowing values 0-15, so the advance can be 0-60 bytes. An IHL value of 15 with only 20 bytes validated causes a 40-byte over-read. An IHL of 0-4 causes the pointer to not advance past the IP header, resulting in the TCP/UDP header being parsed from IP header data (type confusion). This vulnerability is reachable via any packet capture interface.

• CWE-125

• https://github.com/pavel-odintsov/fastnetmon
• https://github.com/pavel-odintsov/fastnetmon/blob/master/src/simple_packet_parser_ng.cpp
• https://lorikeetsecurity.com/blog/fastnetmon-cve-2026-48682-ipv4-parser-oob

Published

Jun 2, 2026

Last Modified

Jul 22, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48618A flaw in Node.js TLS hostname handling can cause Node.js un…6.5
• CVE-2026-48619A flaw in Node.js HTTP/2 client allows a server to send an u…7.5
• CVE-2026-4862A security vulnerability has been detected in UTT HiPER 1250…8.8
• CVE-2026-4867Impact: A bad regular expression is generated any time you …7.5
• CVE-2026-4868GitLab has remediated an issue in GitLab EE affecting all ve…8.2
• CVE-2026-48681OpenStack Ironic through before 35.0.2 allows file overwrite…8.1
• CVE-2026-48683FastNetMon Community Edition through 1.2.9 contains an out-o…6.5
• CVE-2026-48684FastNetMon Community Edition through 1.2.9 contains an out-o…6.5
• CVE-2026-48685FastNetMon Community Edition through 1.2.9 has out-of-bounds…6.5
• CVE-2026-48686FastNetMon Community Edition through 1.2.9 contains a stack-…9.8
• CVE-2026-48687FastNetMon Community Edition through 1.2.9 contains an OS co…9.8
• CVE-2026-48688FastNetMon Community Edition through 1.2.9 contains multiple…7.5