Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
pcpp: Uninitialized Data Used in Hex String Conversion
published 7 months ago
Summary
A bug in pcpp library's hex string conversion function can cause a crash when dealing with uninitialized data. This affects systems using pcpp for network protocol handling. To mitigate this, update to the latest version of pcpp.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| OSS-Fuzz | – | pcapplusplus | All versions |
Original advisory text
Use-of-uninitialized-value in pcpp::byteArrayToHexString
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=491288647
```
Crash type: Use-of-uninitialized-value
Crash state:
pcpp::byteArrayToHexString
pcpp::PacketTrailerLayer::toString
FuzzTarget.cpp
```
```
Crash type: Use-of-uninitialized-value
Crash state:
pcpp::byteArrayToHexString
pcpp::PacketTrailerLayer::toString
FuzzTarget.cpp
```
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=491288647 Third Party Advisory
Timeline
Published12 Mar 2026
Updated13 Jul 2026
First seen13 Jul 2026
Track software like this
Free during beta