CVE-2026-29004
Heap Buffer Overflow in BusyBox DHCPv6 Client
Publication date: 2026-05-04
Last updated on: 2026-05-06
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| busybox | busybox | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-122 | A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
Exploitation of this vulnerability can lead to denial of service or arbitrary code execution on affected embedded systems that do not have heap hardening. This means attackers could crash the system or potentially run malicious code remotely, compromising system integrity and availability.
Can you explain this vulnerability to me?
This vulnerability exists in BusyBox versions before commit 42202bf, specifically in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler. It is a heap buffer overflow caused by incorrect heap buffer allocation calculations in the option_to_env() function. Network-adjacent attackers can exploit this by sending a specially crafted DHCPv6 response containing a malformed D6_OPT_DNS_SERVERS option, which triggers memory corruption.