CVE-2026-112062

MediumCVSS 5.9/10Last modified Oct 19, 2026

Description

lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. Attackers on the local link can send multicast PTR answers with oversized RDLENGTH or SRV answers with RDLENGTH below 6 during a service search, overflowing a 256-byte stack buffer and crashing the device.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Weakness enumeration

CWE-121

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 18, 2026
Last modified
Oct 19, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1120635.9libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a CVE-2026-1120647.1The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and used them in a databaCVE-2026-1120655.3The routes that provide consent history and statistics data did not check whether the backend user had access to the module or to the requesCVE-2026-1120667.1The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend users with access to tCVE-2026-1120676.9The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can request a CAPTCHA image cCVE-2026-1120685.3The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore opeCVE-2026-1120696.3The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were CVE-2026-112079.6Insufficient validation of untrusted input in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perfCVE-2026-1120705.3The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user CVE-2026-1120716.9The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns itCVE-2026-1120736.3A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this vulnerability is the functioCVE-2026-1120746.3A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function n