CVE-2026-112062

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-112062
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112062.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-112062
Downstream
Published
2026-10-18T12:19:52Z
Modified
2026-10-19T02:45:57Z
Severity
  • 6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
lwIP through 2.2.1 Stack Out-of-Bounds Write via mDNS Search Response Handler
Details

lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. Attackers on the local link can send multicast PTR answers with oversized RDLENGTH or SRV answers with RDLENGTH below 6 during a service search, overflowing a 256-byte stack buffer and crashing the device.

Database specific 
{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-121"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112062.json"
}
References

Affected packages

Git / https.git.savannah.gnu.org/git/lwip.git/

Affected ranges

Type
GIT
Repo
https://https.git.savannah.gnu.org/git/lwip.git/
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
77dcd25a72509eb83f72b033d219b1d40cd8eb95
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "2.2.1"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

Other
POST_PACK_REMOVE
POST_REMOVE_ARCH
PRE_ARCH_MOVE
PRE_PACK_REMOVE
PRE_leon-dhcp
STABLE-0_6_4
STABLE-0_6_5
STABLE-0_7_0
STABLE-1_0_0
STABLE-1_1_0
STABLE-1_1_0-RC1
STABLE-1_1_1
STABLE-1_3_0
STABLE-1_3_0-RC1
STABLE-1_3_1
STABLE-1_3_1-RC1
STABLE-1_3_1-RC2
STABLE-1_3_1-RC3
STABLE-1_3_2
STABLE-1_3_2-RC1
STABLE-1_4_0
STABLE-1_4_0-RC1
STABLE-1_4_0-RC2
STABLE-2_1_0_RC1
STABLE-2_1_0_RELEASE
STABLE-2_2_0_RC1
STABLE-2_2_0_RELEASE
STABLE-2_2_1_RELEASE
cvs-repository-moved-to-git
master_at_STABLE-2_0_0
merged_from_main_to_DEVEL
merged_from_main_to_STABLE
merged_from_main_to_STABLE-0_7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112062.json"