CVE-2026-14461: CWE-125 Out-of-bounds read in BitWizard mtr
BitWizard mtr versions up to 0.96 contain an out-of-bounds read vulnerability in the ipinfo_lookup() function. This occurs when processing a DNS TXT response larger than 512 bytes with a crafted compression pointer in the answer NAME field, causing a crash. The issue was fixed in a later commit after version 0.96. The vulnerability has a medium severity rating with a CVSS score of 5.1.
AI Analysis
Technical Summary
The mtr utility from BitWizard is affected by a CWE-125 out-of-bounds read vulnerability in the ipinfo_lookup() function. An attacker capable of influencing the DNS TXT response used for AS lookups can craft a DNS response exceeding 512 bytes with a malicious compression pointer in the answer NAME field. The ipinfo_lookup() function incorrectly uses the response length as the boundary for the dn_expand() function, leading to an out-of-bounds read and a reliable crash. This vulnerability affects mtr versions up to and including 0.96 and was fixed in a commit identified as 48e1794414d338ce47abc0f27c25ade8788af9c3.
Potential Impact
Successful exploitation results in a reliable crash of the mtr process due to an out-of-bounds read. This can lead to denial of service conditions. There is no indication from the data that this vulnerability allows code execution or data disclosure.
Mitigation Recommendations
A fix for this vulnerability exists and was applied after version 0.96 in commit 48e1794414d338ce47abc0f27c25ade8788af9c3. Users should upgrade to a version of mtr that includes this fix. Since no official patch link or advisory is provided, verify the fix by updating to versions later than 0.96 or consult the vendor repository for the specific commit. No additional mitigation steps are indicated.
CVE-2026-14461: CWE-125 Out-of-bounds read in BitWizard mtr
Description
BitWizard mtr versions up to 0.96 contain an out-of-bounds read vulnerability in the ipinfo_lookup() function. This occurs when processing a DNS TXT response larger than 512 bytes with a crafted compression pointer in the answer NAME field, causing a crash. The issue was fixed in a later commit after version 0.96. The vulnerability has a medium severity rating with a CVSS score of 5.1.
CVSS v4.0
Score 5.1medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The mtr utility from BitWizard is affected by a CWE-125 out-of-bounds read vulnerability in the ipinfo_lookup() function. An attacker capable of influencing the DNS TXT response used for AS lookups can craft a DNS response exceeding 512 bytes with a malicious compression pointer in the answer NAME field. The ipinfo_lookup() function incorrectly uses the response length as the boundary for the dn_expand() function, leading to an out-of-bounds read and a reliable crash. This vulnerability affects mtr versions up to and including 0.96 and was fixed in a commit identified as 48e1794414d338ce47abc0f27c25ade8788af9c3.
Potential Impact
Successful exploitation results in a reliable crash of the mtr process due to an out-of-bounds read. This can lead to denial of service conditions. There is no indication from the data that this vulnerability allows code execution or data disclosure.
Mitigation Recommendations
A fix for this vulnerability exists and was applied after version 0.96 in commit 48e1794414d338ce47abc0f27c25ade8788af9c3. Users should upgrade to a version of mtr that includes this fix. Since no official patch link or advisory is provided, verify the fix by updating to versions later than 0.96 or consult the vendor repository for the specific commit. No additional mitigation steps are indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- CERT-PL
- Date Reserved
- 2026-07-02T08:57:32.810Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a50d4f468715ace437a182f
Added to database: 07/10/2026, 11:18:12 UTC
Last enriched: 07/10/2026, 11:32:37 UTC
Last updated: 07/10/2026, 11:48:48 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.