A vulnerability was found in dnsmasq 2.92rel2 and classified as critical. Affected is the function extract_name. Such manipulation leads to integer overflow.

This vulnerability is uniquely identified as CVE-2026-2291. The attack can be launched remotely. No exploit exists.