CVE-2026-110912 | DragonFly BSD up to 6.4.2 ARP Input sys/netinet/if_ether.c arpintr/in_arpinput ar_hln/ar_pln out-of-bounds

October 15, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in DragonFly BSD up to 6.4.2. Affected is the function arpintr/in_arpinput of the file sys/netinet/if_ether.c of the component ARP Input Handler. This manipulation of the argument ar_hln/ar_pln causes out-of-bounds read.

This vulnerability appears as CVE-2026-110912. The attack may be initiated remotely. There is no available exploit.

It is recommended to apply a patch to fix this issue.VulDB Recent EntriesRead More