CVE-2025-8677 is a vulnerability in BIND 9 DNS server software where querying specially crafted zones containing malformed DNSKEY records can cause CPU exhaustion. This affects multiple BIND 9 versions across 9.18.x, 9.20.x, and 9.21.x branches, including some S1 variants. The issue can lead to denial of service due to resource exhaustion.