CVE-2026-10652

Summary: Zephyr's DNS resolver (dns_unpack_answer) validates only the fixed RR header and may accept an attacker-declared rdlength that extends past the datagram, enabling an out-of-bounds read in TXT/SRV parsing (dns_validate_record). This can leak stale memory contents to applications and, in s...