Threats tagged 'ghsa-m8c5-pmmq-7x3q'

CVE-2026-73462 is an out-of-bounds read vulnerability in Arista Networks EOS affecting the IGMP snooping feature, which is enabled by default on all VLANs. An unauthenticated network-adjacent attacker can send malformed packets to cause the IGMP snooping agent to crash temporarily. This disruption results in multicast traffic being flooded to all ports on the affected VLAN until the service recovers. Repeated exploitation could cause prolonged multicast forwarding issues.