A vulnerability in hickory-proto DNS message decoding allows an attacker to cause excessive memory allocation by sending a DNS message with inflated record counts in the header. This can lead to denial of service due to memory exhaustion. The issue is fixed in version 0.26.2 by capping initial vector capacity.