CVE-2026-12246

Name of the Vulnerable Software and Affected Versions NSD version 4.14.0

Description A memory corruption flaw exists when handling APL (Address Prefix List) resource records during the process of serializing or writing a zone to disk. The issue stems from improper input validation and bounds checking of the adflength field. An attacker can trigger a stack-based buffer overflow by introducing a specially crafted APL record with an adflength larger than permitted for the address family into a zone. This can result in the overwrite of up to 111 attacker-controlled bytes on the stack, potentially leading to a denial of service or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.