Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when generating excessive amounts of alerts for a single packet. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, do not run untrusted rulesets or run with less than 65536 signatures that can match on the same packet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-22264 Suricata Heap Use-After-Free Vulnerability in Versions Prior to 8.0.3 and 7.0.14 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-22264
Post summary
The note reports a use‑after‑free vulnerability in Suricata versions older than 8.0.3 and 7.0.14, providing only the high‑level technical details.
CVE-2026-22264 Suricata is a network IDS, IPS and NSM engine. Prior to version 8.0.3 and 7.0.14, an unsigned integer overflow can lead to a heap use-after-free condition when genera… https://www.cve.org/CVERecord?id=CVE-2026-22264
Post summary
The text outlines the technical details of CVE‑2026‑22264, describing an unsigned integer overflow that causes a heap use‑after‑free in Suricata, but it does not provide PoC, exploit code, active exploitation evidence, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oisf | suricata | - | - | - |