This vulnerability affects the Trusted Domain Project OpenDMARC up to version 1.4.2, specifically in the policy.c file of the Domain Handler component. It allows an attacker to manipulate input equivalence validation, potentially bypassing security checks. The attack vector is network-based with no privileges or user interaction required. The vulnerability has a published exploit but no known active exploitation in the wild. The vendor was notified but did not provide a response or patch.

An attacker can remotely exploit this vulnerability to cause improper validation of input equivalence, which may lead to bypassing security controls or incorrect handling of domain validation policies. The exact impact beyond this is not detailed in the available data. There is no indication of privilege escalation or direct data compromise from the provided information.

No official patch or remediation has been provided by the vendor as of the publication date. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider mitigating exposure by restricting network access to the affected service or applying additional input validation controls if possible.