CVE-2026-112273

MediumCVSS 5.3

Published: 19/10/2026(UTC)Updated: 22/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

40th percentile - higher than 40% of all known CVEs

Summary

libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns.cpp. Remote attackers can send crafted DNS packets with a label ending exactly at the packet end, causing a one-byte read past the buffer and crashing applications on hardened allocators.

Risk Assessment

This can lead to denial of service (application crash) when processing untrusted DNS packets, especially on systems with hardened allocators.

Recommendation

Update libtins to a version later than 4.6 or apply the vendor patch. Avoid processing untrusted DNS packets until updated.

Other vulnerabilities in libtins

CVE-2026-112274Low
libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causing strlen to overrun the heap buffer and possibly crash.

Original NVD description (English source)

libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliver crafted DNS packets whose additional, answer, or authority records trigger a one-byte read when parsed, crashing applications on hardened allocators.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS