CVE-2026-71402

A flaw was found in wicked. An unauthenticated attacker on the same network who sends a crafted DHCP/UDP packet can trigger an out-of-bounds read vulnerability in the DHCPv4 option parser. This allows the client to parse adjacent heap memory as DHCP options, potentially leading to the disclosure ...