CVE-2026-101279: Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow
A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which deployments are potentially affected?
OpenDMARC versions up to and including 1.4.2 are identified as affected, specifically the DMARC Parser code in libopendmarc/opendmarc_policy.c.
What does an attacker need to exploit this issue?
The issue is remotely exploitable with no privileges or user interaction required. Exploitation involves manipulating the pct argument to trigger an integer overflow.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used.