CVE-2026-42512 is a heap buffer overrun vulnerability in dhclient when building the environment array passed to dhclient-script. The resizing of the array incorrectly calculates the new size, leading to memory corruption. A specially crafted network packet can trigger this flaw, potentially causing a crash or enabling remote code execution.