CVE-2025-51005

7.5 highEPSS 0.4%

High (7.5) in broadcom tcpreplay. EPSS 0.4% chance of exploitation in the next 30 days.

A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the program incorrectly handles memory in the checksum calculation logic at do_checksum_math_liveplay in tcpliveplay.c, leading to a possible denial of service.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-122
Published: 2025-09-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

broadcom:tcpreplay

References

https://github.com/appneta/tcpreplay/issues/925
https://github.com/sy460129/CVE-2025-51005

Check your stack JSON