CVE-2026-112273: libtins through 4.6 Heap Out-of-Bounds Read via DNS::compose_name
libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::composename in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliver crafted DNS packets whose additional, answer, or authority records trigger a one-byte read when parsed, crashing applications on hardened allocators.
Affected Software
Event History
Frequently Asked Questions
What must an attacker provide to trigger the flaw?
The attacker must send a crafted DNS packet containing a label that ends exactly at the packet boundary. The malformed name can be parsed from additional, answer, or authority records.
Are credentials or user interaction required?
No. The provided vector indicates no privileges and no user interaction are required.
What is the expected operational impact?
Affected applications can perform a one-byte read beyond the packet buffer. This can crash applications when hardened allocators are in use, resulting in an availability impact.