We have identified a buffer overflow issue allowing out-of-bounds write when processing LLMNR or mDNS queries with very long DNS names.
Date: 2025-06
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2025-5688
CWE: CWE-787

We have identified a buffer overflow issue allowing out-of-bounds write when processing LLMNR or mDNS queries with very long DNS names. This issue only affects systems using Buffer Allocation Scheme 1 with LLMNR or mDNS enabled. Users should upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.


Mitigations:

Architectural layers (MAESTRO):