CVE-2026-42512: Freebsd

High severity, CVSS 8.1. EPSS: 1.8% chance of exploitation in the next 30 days.

As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers. The code which expands the array incorrectly calculates its new size when requesting memory, resulting in a heap buffer overrun. A specially crafted packet can cause dhclient to overrun its buffer of environment entries. This can result in a crash, but it may be possible to leverage this bug to achieve remote code execution.

Affected products

• Freebsd Freebsd: version 13.5 only; version 14.3 only; version 14.4 only; version 15.0 only

Published 2026-04-30. Last modified 2026-06-17.