tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer Return Address etc. on stack. The component is: line 234: \ND_PRINT((ndo \%s\ buf));\ in function named \print_prefix\ in \print-hncp.c\. The attack vector is: The victim must open a specially crafted pcap file.