Search: CVE-2026-80212

CVE-2026-80212 is a high-severity vulnerability in the Ruby resolv gem before version 0.7.2. It involves uncontrolled allocation of resources when decoding DNS responses containing unknown resource record types or service parameter keys. This causes permanent memory growth as new classes are dynamically generated and retained indefinitely, leading to potential denial of service via memory exhaustion. The issue affects any code path calling Resolv::DNS::Message.decode on attacker-influenced DNS responses. The resolv gem is included by default in Ruby installations, making this vulnerability broadly reachable.