CVE-2026-102715

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A heap-buffer-overflow occurs when a host on the local area network sends two mDNS records with owner names whose lengths fall into the same rounded slot size bucket (for example, names between 12 and 15 characters). The system incorrectly matches a second name to an existing slot based on the rounded size rather than the actual string length. Consequently, the nx mdns packet rr add() function performs a bound check using a stale length, while the nx mdns name string encode() function writes the actual, longer string. This results in one to three bytes of attacker-influenced data being written past the nx packet data end boundary, potentially corrupting neighboring packets or the pool free list.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.