Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past `tim.bitmap[251]`. The overflow is small and DoS is the likely impact; code execution is potential, but still up in the air. The affected structure is stack-allocated in `handle_beacon()` and related handlers. As of time of publication, no known patches are available.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2026-25061 Buffer Overflow in tcpflow 1.61 TIM Element Parsing Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25061 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The post announces the discovery of CVE‑2026‑25061, a buffer overflow in tcpflow 1.61, without any PoC, exploit, or patch information.
CVE-2026-25061 tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wr… https://www.cve.org/CVERecord?id=CVE-2026-25061
Post summary
A vulnerability was identified in wifipcap (versions up to 1.61) involving improper length checks on 802.11 management frame elements, potentially leading to exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 11.0 | - | - |
| App | digitalcorpora | tcpflow | - | - | - |