CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-46433

lldpd is an implementation of IEEE 802.1ab (LLDP). Prior to version 1.0.22, lldpd_decode() in src/daemon/lldpd.c strips 802.1Q VLAN tags from received Ethernet frames by calling memmove() to shift the frame payload 4 bytes left. The third argument (byte count) is s - 2 * ETHER_ADDR_LEN but should be s - 2 * ETHER_ADDR_LEN - 4, causing a 4-byte heap buffer over-read past the malloc(h_mtu) allocation when the received frame size equals the interface MTU. This issue has been patched in version 1.0.22.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 2.9%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2026-46433

Lldpd Project » Lldpd » Version: N/A

cpe:2.3:a:lldpd_project:lldpd:-
Lldpd Project » Lldpd » Version: 0.2

cpe:2.3:a:lldpd_project:lldpd:0.2
Lldpd Project » Lldpd » Version: 0.2.1

cpe:2.3:a:lldpd_project:lldpd:0.2.1
Lldpd Project » Lldpd » Version: 0.3

cpe:2.3:a:lldpd_project:lldpd:0.3
Lldpd Project » Lldpd » Version: 0.3.1

cpe:2.3:a:lldpd_project:lldpd:0.3.1
Lldpd Project » Lldpd » Version: 0.3.2

cpe:2.3:a:lldpd_project:lldpd:0.3.2
Lldpd Project » Lldpd » Version: 0.3.3

cpe:2.3:a:lldpd_project:lldpd:0.3.3
Lldpd Project » Lldpd » Version: 0.4.0

cpe:2.3:a:lldpd_project:lldpd:0.4.0
Lldpd Project » Lldpd » Version: 0.4.1

cpe:2.3:a:lldpd_project:lldpd:0.4.1
Lldpd Project » Lldpd » Version: 0.4.2

cpe:2.3:a:lldpd_project:lldpd:0.4.2
Lldpd Project » Lldpd » Version: 0.5.0

cpe:2.3:a:lldpd_project:lldpd:0.5.0
Lldpd Project » Lldpd » Version: 0.5.1

cpe:2.3:a:lldpd_project:lldpd:0.5.1
Lldpd Project » Lldpd » Version: 0.5.2

cpe:2.3:a:lldpd_project:lldpd:0.5.2
Lldpd Project » Lldpd » Version: 0.5.4

cpe:2.3:a:lldpd_project:lldpd:0.5.4
Lldpd Project » Lldpd » Version: 0.5.5

cpe:2.3:a:lldpd_project:lldpd:0.5.5
Lldpd Project » Lldpd » Version: 0.5.6

cpe:2.3:a:lldpd_project:lldpd:0.5.6
Lldpd Project » Lldpd » Version: 0.5.7

cpe:2.3:a:lldpd_project:lldpd:0.5.7
Lldpd Project » Lldpd » Version: 0.6.0

cpe:2.3:a:lldpd_project:lldpd:0.6.0
Lldpd Project » Lldpd » Version: 0.6.1

cpe:2.3:a:lldpd_project:lldpd:0.6.1
Lldpd Project » Lldpd » Version: 0.7.0

cpe:2.3:a:lldpd_project:lldpd:0.7.0
Lldpd Project » Lldpd » Version: 0.7.1

cpe:2.3:a:lldpd_project:lldpd:0.7.1
Lldpd Project » Lldpd » Version: 0.7.10

cpe:2.3:a:lldpd_project:lldpd:0.7.10
Lldpd Project » Lldpd » Version: 0.7.11

cpe:2.3:a:lldpd_project:lldpd:0.7.11
Lldpd Project » Lldpd » Version: 0.7.12

cpe:2.3:a:lldpd_project:lldpd:0.7.12
Lldpd Project » Lldpd » Version: 0.7.13

cpe:2.3:a:lldpd_project:lldpd:0.7.13
Lldpd Project » Lldpd » Version: 0.7.14

cpe:2.3:a:lldpd_project:lldpd:0.7.14
Lldpd Project » Lldpd » Version: 0.7.15

cpe:2.3:a:lldpd_project:lldpd:0.7.15
Lldpd Project » Lldpd » Version: 0.7.16

cpe:2.3:a:lldpd_project:lldpd:0.7.16
Lldpd Project » Lldpd » Version: 0.7.17

cpe:2.3:a:lldpd_project:lldpd:0.7.17
Lldpd Project » Lldpd » Version: 0.7.18

cpe:2.3:a:lldpd_project:lldpd:0.7.18
Lldpd Project » Lldpd » Version: 0.7.19

cpe:2.3:a:lldpd_project:lldpd:0.7.19
Lldpd Project » Lldpd » Version: 0.7.2

cpe:2.3:a:lldpd_project:lldpd:0.7.2
Lldpd Project » Lldpd » Version: 0.7.3

cpe:2.3:a:lldpd_project:lldpd:0.7.3
Lldpd Project » Lldpd » Version: 0.7.4

cpe:2.3:a:lldpd_project:lldpd:0.7.4
Lldpd Project » Lldpd » Version: 0.7.5

cpe:2.3:a:lldpd_project:lldpd:0.7.5
Lldpd Project » Lldpd » Version: 0.7.6

cpe:2.3:a:lldpd_project:lldpd:0.7.6
Lldpd Project » Lldpd » Version: 0.7.7

cpe:2.3:a:lldpd_project:lldpd:0.7.7
Lldpd Project » Lldpd » Version: 0.7.8

cpe:2.3:a:lldpd_project:lldpd:0.7.8
Lldpd Project » Lldpd » Version: 0.7.9

cpe:2.3:a:lldpd_project:lldpd:0.7.9
Lldpd Project » Lldpd » Version: 0.8.0

cpe:2.3:a:lldpd_project:lldpd:0.8.0
Lldpd Project » Lldpd » Version: 0.9.0

cpe:2.3:a:lldpd_project:lldpd:0.9.0
Lldpd Project » Lldpd » Version: 0.9.1

cpe:2.3:a:lldpd_project:lldpd:0.9.1
Lldpd Project » Lldpd » Version: 0.9.2

cpe:2.3:a:lldpd_project:lldpd:0.9.2
Lldpd Project » Lldpd » Version: 0.9.3

cpe:2.3:a:lldpd_project:lldpd:0.9.3
Lldpd Project » Lldpd » Version: 0.9.4

cpe:2.3:a:lldpd_project:lldpd:0.9.4
Lldpd Project » Lldpd » Version: 0.9.5

cpe:2.3:a:lldpd_project:lldpd:0.9.5
Lldpd Project » Lldpd » Version: 0.9.6

cpe:2.3:a:lldpd_project:lldpd:0.9.6
Lldpd Project » Lldpd » Version: 0.9.7

cpe:2.3:a:lldpd_project:lldpd:0.9.7
Lldpd Project » Lldpd » Version: 0.9.8

cpe:2.3:a:lldpd_project:lldpd:0.9.8
Lldpd Project » Lldpd » Version: 0.9.9

cpe:2.3:a:lldpd_project:lldpd:0.9.9
Lldpd Project » Lldpd » Version: 1.0.0

cpe:2.3:a:lldpd_project:lldpd:1.0.0
Lldpd Project » Lldpd » Version: 1.0.1

cpe:2.3:a:lldpd_project:lldpd:1.0.1
Lldpd Project » Lldpd » Version: 1.0.10

cpe:2.3:a:lldpd_project:lldpd:1.0.10
Lldpd Project » Lldpd » Version: 1.0.11

cpe:2.3:a:lldpd_project:lldpd:1.0.11
Lldpd Project » Lldpd » Version: 1.0.12

cpe:2.3:a:lldpd_project:lldpd:1.0.12
Lldpd Project » Lldpd » Version: 1.0.13

cpe:2.3:a:lldpd_project:lldpd:1.0.13
Lldpd Project » Lldpd » Version: 1.0.14

cpe:2.3:a:lldpd_project:lldpd:1.0.14
Lldpd Project » Lldpd » Version: 1.0.15

cpe:2.3:a:lldpd_project:lldpd:1.0.15
Lldpd Project » Lldpd » Version: 1.0.16

cpe:2.3:a:lldpd_project:lldpd:1.0.16
Lldpd Project » Lldpd » Version: 1.0.17

cpe:2.3:a:lldpd_project:lldpd:1.0.17
Lldpd Project » Lldpd » Version: 1.0.2

cpe:2.3:a:lldpd_project:lldpd:1.0.2
Lldpd Project » Lldpd » Version: 1.0.3

cpe:2.3:a:lldpd_project:lldpd:1.0.3
Lldpd Project » Lldpd » Version: 1.0.4

cpe:2.3:a:lldpd_project:lldpd:1.0.4
Lldpd Project » Lldpd » Version: 1.0.5

cpe:2.3:a:lldpd_project:lldpd:1.0.5
Lldpd Project » Lldpd » Version: 1.0.6

cpe:2.3:a:lldpd_project:lldpd:1.0.6
Lldpd Project » Lldpd » Version: 1.0.7

cpe:2.3:a:lldpd_project:lldpd:1.0.7
Lldpd Project » Lldpd » Version: 1.0.8

cpe:2.3:a:lldpd_project:lldpd:1.0.8
Lldpd Project » Lldpd » Version: 1.0.9

cpe:2.3:a:lldpd_project:lldpd:1.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-46433

Products

Pricing

Contact Us