TI-2026-23174 CVE-2026-29004 · GHSA-vx55-mmvv-p227
BusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS
Priority LOW 32
BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows network-adjacent attackers to trigger memor…