CVE-2026-1425

A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function _dns_decode_rr_head/_dns_decode_SVCB_HTTPS of the file src/dns.c of the component SVBC Record Parser. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is stated that the exploitability is difficult. The patch is identified as 2d57c4b4e1add9b4537aeb403f794a084727e1c8. Applying a patch is advised to resolve this issue.

• CWE-119
• CWE-121

• https://github.com/pymumu/smartdns/
• https://github.com/pymumu/smartdns/commit/2d57c4b4e1add9b4537aeb403f794a084727e1c8
• https://vuldb.com/?ctiid.342841
• https://vuldb.com/?id.342841
• https://vuldb.com/?submit.736827

Published

Jan 26, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-1424A vulnerability was identified in PHPGurukul News Portal 1.0…7.2
• CVE-2026-14240The tourmaster WordPress plugin before 5.4.9 writes its orde…5.3
• CVE-2026-14241Memory safety bugs present in Firefox 152.0.3. Some of these…9.8
• CVE-2026-14244The Jssor Slider by jssor.com plugin for WordPress is vulner…7.5
• CVE-2026-14245The miniOrange OTP Login, Verification and SMS Notifications…9.8
• CVE-2026-14249The Request a Quote plugin for WordPress is vulnerable to Co…7.5
• CVE-2026-14250The Themehunk Login Registration plugin for WordPress is vul…6.3
• CVE-2026-14251A flaw was found in the OpenShift GitOps operator. The Clust…7.7
• CVE-2026-14253Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-14254A race condition in the account lockout mechanism in Delphix…8.3
• CVE-2026-14255A maliciously crafted IFC file, when parsed through certain …5.5
• CVE-2026-14256ELAN reported a potential out-of-bounds write vulnerability …4.7