CVE-2020-25767

CVE-2020-25767 describes an out-of-bounds read vulnerability in HCC Embedded NicheStack IPv4 4.1. Specifically, the dnc_copy_in routine fails to validate DNS domain name compression pointers, allowing them to point outside packet boundaries. This flaw can be exploited remotely with low attack complexity, leading to a denial-of-service condition. While rated as high severity (CVSS 7.5), there is no evidence of active exploitation, public exploit code, or significant community discussion, though it has received limited media coverage.