CVE-2026-12969

Name of the Vulnerable Software and Affected Versions dnsmasq (affected versions not specified)

Description An out-of-bounds read occurs in the find soa() function within src/rfc1035.c. During the parsing of NS section records, the extract name() function is called with extrabytes=0, which fails to verify the existence of 10 additional bytes required for fixed-length DNS record fields. A remote attacker who controls a DNS zone can trigger a 10-byte heap out-of-bounds read by sending a crafted NXDOMAIN response, potentially allowing access to stale data from previous transactions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.