A vulnerability, which was classified as critical, was found in dnsmasq. This affects an unknown function of the component Bootstrap Protocol Reply Handler. The manipulation results in out-of-bounds write.

This vulnerability is known as CVE-2026-6507. It is possible to launch the attack remotely. No exploit is available.