CVE-2026-48690

The record

FastNetMon Community Edition through 1.2.9 contains an integer overflow vulnerability in the packet capture buffer allocation. In src/packet_storage.hpp, the allocate_buffer() function computes memory_size_in_bytes as 'buffer_size_in_packets * (max_captured_packet_size + sizeof(fastnetmon_pcap_pkthdr_t)) + sizeof(fastnetmon_pcap_file_header_t)' using unsigned int (32-bit) arithmetic. With max_captured_packet_size=1500 and sizeof(fastnetmon_pcap_pkthdr_t)=16, each packet requires approximately 1516 bytes. If buffer_size_in_packets exceeds approximately 2,832,542, the multiplication overflows, resulting in a much smaller allocation than expected. Subsequent write_packet() calls then write past the allocated buffer, causing heap corruption. The buffer_size_in_packets value is derived from the ban_details_records_count configuration parameter, which is parsed using atoi() with no overflow checking.

Affected packages

Related vulnerabilities

• CVE-2026-112403 Pillow is a Python imaging library. CWE-122
• CVE-2026-112393 Pillow is a Python imaging library. CWE-122
• CVE-2026-112395 Pillow is a Python imaging library. CWE-122
• CVE-2026-103658 GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer… CWE-122
• CVE-2026-107161 A heap-based buffer overflow flaw was found in Cyrus SASL. CWE-122
• CVE-2026-106574 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-122
• CVE-2026-106564 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-122
• CVE-2026-46570 In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in… CWE-122