CVE-2026-56416 | NLnet Labs Unbound up to 1.25.1 Wire Format Parser query_dname_tolower heap-based overflow (WID-SEC-2026-2492)

A vulnerability classified as . Impacted is the function query_dname_tolower of the component Wire Format Parser. Executing a manipulation can lead to heap-based buffer overflow.

The identification of this vulnerability is CVE-2026-56416. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.