CVE-2016-8597: Libcsp

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Buffer overflow in the csp_sfp_recv_fp in csp_sfp.c in the libcsp library v1.4 and earlier allows hostile components with network access to the SFP underlying network layers to execute arbitrary code via specially crafted SFP packets.

Affected products

• Libcsp Libcsp: up to and including 1.4

Published 2016-10-28. Last modified 2026-06-17.