CVE-2026-100888: Trusted Domain Project OpenDKIM DKIM Signature Header Selection dkim-canon.c dkim_canon_selecthdrs out-of-bounds write
A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkimcanonselecthdrs of the file libopendkim/dkim-canon.c of the component DKIM Signature Header Selection. Executing a manipulation of the argument h can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Trusted Domain Project OpenDKIM versions up to and including 2.11.0 are identified as affected. The issue is in DKIM Signature Header Selection within libopendkim/dkim-canon.c.
Can this be exploited remotely without credentials or user interaction?
Yes. The supplied vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What does an attacker need to manipulate?
Exploitation involves manipulating the argument h passed to dkim_canon_selecthdrs, which can trigger an out-of-bounds write.
Is public exploit information available?
Yes. The vulnerability information states that an exploit has been made public and could be used in attacks.