CRITICALVulnerability
Verified
Global
NVD CRITICAL: CVE-2026-48686 — FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflo...
·Source: NIST NVD
Updated:
Executive Summary
FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) decoder. The function decode_bgp_subnet_encoding_ipv4_raw() in src/bgp_protocol.cpp reads prefix_bit_length directly from the BGP packet (line 99) without validating it is <= 32 for IPv4 prefixes. This value is passed to how_much_bytes_we_need_for_storing_certa
Analysis
FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) decoder. The function decode_bgp_subnet_encoding_ipv4_raw() in src/bgp_protocol.cpp reads prefix_bit_length directly from the BGP packet (line 99) without validating it is 32 causes undefined behavior. CVSS Score: 9.8. Published: 2026-05-26T16:16:26.693.