CVE-2026-64860

The mdns component in ESP-Protocols (prior to version 1.11.2) is vulnerable to uncontrolled recursion when parsing fully qualified domain names (FQDNs) in inbound mDNS packets. Specifically, the mdns_utils_read_fqdn() function fails to cap pointer-follow depth during DNS name-compression, allowin...

EUVD-2026-117493

ESP-Protocols is a collection of protocol components for ESP-IDF. Prior to mDNS version 1.11.2, the mdns component follows DNS name-compression pointers recursively when parsing fully qualified domain names FQDNs in inbound mDNS packets without capping pointer-follow depth in mdnsutilsreadfqdn. A...

CVE-2026-64860

ESP-Protocols is a collection of protocol components for ESP-IDF. Prior to mDNS version 1.11.2, the mdns component follows DNS name-compression pointers recursively when parsing fully qualified domain names FQDNs in inbound mDNS packets without capping pointer-follow depth in mdnsutilsreadfqdn. A...