CVE-2025-51005: Broadcom Tcpreplay

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the program incorrectly handles memory in the checksum calculation logic at do_checksum_math_liveplay in tcpliveplay.c, leading to a possible denial of service.

Affected products

• Broadcom Tcpreplay: version 4.5.1 only

Published 2025-09-23. Last modified 2026-06-17.