CyberSecBulletin

Simsong vulnerabilities

We track 2 vulnerabilities in Simsong products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 29, 2026.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Simsong vulnerabilities

  • 7.5 High severity

    tcpflow: Out-of-bounds Write

    CVE-2026-25061Simsong

    tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1

  • 9.8 Critical severity

    bulk_extractor: Out-of-bounds Write

    CVE-2026-24857Simsong

    `bulk_extractor` is a digital forensics exploitation tool. Starting in version 1.4, `bulk_extractor`’s embedded unrar code has a heap‑buffer‑overflow in the RAR PPM LZ decoding path. A crafted RAR inside a disk image causes an out‑of‑bounds write in `Unpack::C