CVE-2026-112273

libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::composename in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliver crafted DNS packets whose additional, answer, or authority...

CVE-2026-112273

The libtins library (through version 4.6 ) is vulnerable to a heap out-of-bounds read in the DNS::compose_name function located in src/dns.cpp. This vulnerability occurs when a remote attacker sends a crafted DNS packet where a label ends exactly at the packet end, causing the parser to read one ...

CVE-2026-112273 libtins through 4.6 Heap Out-of-Bounds Read via DNS::compose_name

libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::composename in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliver crafted DNS packets whose additional, answer, or authority...

EUVD-2026-104300

libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::composename in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliver crafted DNS packets whose additional, answer, or authority...