TI-2026-35487 CVE-2026-48045 · GHSA-9663-mqmp-p9mm
Zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood
Priority LOW 29
Zeroconf is a pure Python implementation of multicast DNS service discovery.
python-zeroconf
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
python-zeroconf records in CISA KEVNo python-zeroconf vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Zeroconf · all components
TI-2026-34773 CVE-2026-47184 · GHSA-rfg2-pjw2-56x2
Zeroconf: Unbounded DNS record cache allows LAN-local memory exhaustion via multicast flood
Priority LOW 29
Zeroconf is a pure Python implementation of multicast DNS service discovery.
TI-2026-34772 CVE-2026-47183 · GHSA-phvx-9mgw-67r5
Uncontrolled resource consumption in python-zeroconf
Priority LOW 29
Zeroconf is a pure Python implementation of multicast DNS service discovery.
TI-2026-34769 CVE-2026-47180 · GHSA-9pgc-3ccv-5297
Zeroconf: Unbounded recursion in DNS compression-pointer decoder allows LAN-local denial of service
Priority LOW 29
Zeroconf is a pure Python implementation of multicast DNS service discovery.
TI-2026-35849 CVE-2026-48487 · GHSA-qc2x-6f54-m6h9
Zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet
Priority LOW 24
Zeroconf is a pure Python implementation of multicast DNS service discovery.