CVE-2025-64330
High · 7.5CVSS
7.5
EPSS
0.4%
Published
Nov 26, 2025
CISA due date
—
The record
Suricata is vulnerable to a heap buffer overflow on verdict
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | suricata | 0 | 8.0.3-1.1 |
Related vulnerabilities
- CVE-2026-31934 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31937 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31935 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31931 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31932 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31933 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-22264 Suricata detect/alert: heap-use-after-free on alert queue expansion Also affects suricata
- CVE-2026-22263 Suricata http1: quadratic complexity in headers parsing over multiple packets Also affects suricata