Threats Tagged 'brew-airshare-cve-2026-48487'

A vulnerability in the Airshare zeroconf Python library allows unauthenticated local network hosts to inject malformed mDNS records with over-advertised length fields, causing cache corruption. This occurs because the parser reads record lengths without validating against the actual data buffer size, leading to desynchronization of parser state and insertion of attacker-shaped records into the cache. The issue affects versions prior to 0.149.16 and is fixed in that version. The vulnerability does not allow remote code execution or denial of service but can poison the local mDNS cache, potentially impacting downstream services relying on zeroconf discovery.