libslirp vulnerabilities

CVEs whose affected-version data names the libslirp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-95508High· 7.4

yesterday

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply bu…

▾ TwilightRed Hat · libslirpEPSS 0.42%via NVD