The Trusted Domain Project OpenDMARC up to version 1.4.2 contains an integer overflow vulnerability in the DMARC Parser component (libopendmarc/opendmarc_policy.c). The vulnerability arises from improper handling of the 'pct' argument, which can be manipulated to cause an integer overflow. This flaw is remotely exploitable and has been publicly disclosed. The vendor has not issued any response or patch. The CVSS 4.0 score is 6.9, reflecting a medium severity level with network attack vector, low attack complexity, and no privileges or user interaction required.

Successful exploitation of this integer overflow could lead to unexpected behavior in the OpenDMARC service, potentially allowing an attacker to disrupt DMARC parsing or cause denial of service. The exact impact beyond the overflow is not detailed in the available information. Remote exploitation is possible without authentication or user interaction.

No official fix or patch has been provided by the vendor as of the disclosure date. Users should monitor the vendor's channels for any future updates or patches. Until a fix is available, consider mitigating exposure by restricting network access to the OpenDMARC service or employing additional monitoring for anomalous DMARC traffic. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.