Gopacket vulnerabilities
We track 3 vulnerabilities in Gopacket products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2026.
Latest Gopacket vulnerabilities
- 7.5 High severity
gopacket: Out-of-bounds Read
gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers, allowing a crafted packet decoded through DecodingLayerPa
- 7.5 High severity
gopacket: Integer Underflow (Wrap or Wraparound)
gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diameter AVP decoder computes an AVP data length by subtracting a fixed header size from an attacker-controlled AVP Length field, so a vendor-flagged AVP whose Length is
- 7.5 High severity
gopacket: Allocation of Resources Without Limits or Throttling
gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the sFlow ExtendedGatewayFlow decoder in layers/sflow.go reads an attacker-controlled 32-bit community count and AS path member count and sizes a slice allocation from those