CVE-2026-101279
mediumA security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2.
A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarc_policy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://vuldb.com/cve/CVE-2026-101279 cna@vuldb.com
- https://vuldb.com/submit/918280 cna@vuldb.com
- https://vuldb.com/vuln/411036 cna@vuldb.com
- https://vuldb.com/vuln/411036/cti cna@vuldb.com
- https://xuyongzhe-vt.github.io/share/dmarc-pct-integer-handling.html cna@vuldb.com