CVE-2026-47180

A flaw was found in Zeroconf, a Python implementation of multicast DNS service discovery. An unauthenticated attacker on the local network can send a specially crafted multicast DNS mDNS packet with chained pointers. This can trigger a recursion error, leading to sustained CPU usage, excessive...

PT-2026-48689

Name of the Vulnerable Software and Affected Versions Zeroconf versions prior to 0.149.12 Description An issue exists in the AsyncListener.handle query or defer function where the software retains every truncated TC-bit incoming query in self. deferredaddr and arms a per-address timer in self...