CVE-2026-95508

Name of the Vulnerable Software and Affected Versions libslirp (affected versions not specified)

Description A heap-based buffer overflow exists in the DHCPv6 and TFTP response builders. This occurs when the host is configured with a small interface MTU (Maximum Transmission Unit), which is the maximum size of a packet that can be sent in a single network transaction. A guest can provide a specifically crafted DHCPv6 CLIENTID option or a TFTP blksize option to overflow the reply buffer with controlled content and length. This can lead to a denial of service or potentially allow arbitrary code execution within the host process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.