CVE-2026-119299 | gopacket up to 1.7.1 SCTP Sub-decoder layers/sctp.go out-of-bounds

October 30, 2026 Yanac

A vulnerability was found in gopacket up to 1.7.1 and classified as problematic. Affected is the function decodeSCTPInit/decodeSCTPShutdown/decodeSCTPError/decodeSCTPSack/decodeSCTPParameter of the file layers/sctp.go of the component SCTP Sub-decoder. Such manipulation leads to out-of-bounds read.

This vulnerability is referenced as CVE-2026-119299. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More