Search: CVE-2026-47183

A vulnerability in the Airshare zeroconf component of homeassistant-cli allows unauthenticated attackers on the local network to cause memory exhaustion by sending malformed mDNS packets. This occurs due to unbounded storage of exception deduplication state that retains large packet buffers, potentially leading to out-of-memory conditions and service degradation. The issue is fixed in zeroconf version 0.149.6. No in-process workaround exists, so upgrading or restricting mDNS traffic to trusted network segments is recommended.