Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
PCPP DNS Resource Decoding Crash
published 7 months ago
Summary
The PCPP library's DNS resource decoding feature may crash when processing certain DNS data. This could potentially allow an attacker to cause a program using PCPP to crash, but it's not clear how this would be exploited. To be safe, update to the latest version of PCPP.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| OSS-Fuzz | – | pcapplusplus | All versions |
Original advisory text
Use-of-uninitialized-value in pcpp::IDnsResource::decodeName
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=494047119
```
Crash type: Use-of-uninitialized-value
Crash state:
pcpp::IDnsResource::decodeName
pcpp::IDnsResource::IDnsResource
pcpp::DnsLayer::parseResources
```
```
Crash type: Use-of-uninitialized-value
Crash state:
pcpp::IDnsResource::decodeName
pcpp::IDnsResource::IDnsResource
pcpp::DnsLayer::parseResources
```
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=494047119 Third Party Advisory
Timeline
Published20 Mar 2026
Updated13 Jul 2026
First seen13 Jul 2026
Track software like this
Free during beta