CVE-2025-12200

Name of the Vulnerable Software and Affected Versions dnsmasq versions prior to 2.73rc6

Description A flaw exists in dnsmasq related to the parse dhcp opt function within the Config File Handler component, specifically in the file src/option.c. Manipulation of the argument m can lead to a null pointer dereference. This issue can only be exploited locally. The exploit for this issue has been publicly disclosed. The vendor was informed of this disclosure but did not respond.

Recommendations Update dnsmasq to a version newer than 2.73rc6.