VYPR

DNS resolver

by Zephyrproject Rtos

CVEs (1)

  • CVE-2026-10652Jun 30, 2026
    risk 0.00cvss epss 0.00

    Zephyr's DNS resolver (subsys/net/lib/dns) parses resource records from DNS responses in dns_unpack_answer(), which validated only the fixed RR header (type, class, TTL, rdlength) and accepted any attacker-declared rdlength, including one extending past the end of the received…