CVE-2026-12725

Name: CVE-2026-12725
Creator: NVD / NIST
Published: 2026-06-22T16:16:34.49+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 5.9/10EPSS 0.41%

Last modified Jun 22, 2026

This CVE is reserved or awaiting analysis. Details will appear once published by NVD.

Description

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply such a DNS response may crash the dnsmasq process, resulting in denial of service.

Metrics

CVSS 3.1

5.9/10

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Probability

0.41%

32.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-122

References

https://access.redhat.com/security/cve/CVE-2026-12725
https://bugzilla.redhat.com/show_bug.cgi?id=2490763

Timeline

Published: Jun 22, 2026
Last Modified: Jun 22, 2026
Status: Awaiting Analysis

Are you affected by CVE-2026-12725?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST