# Nlnetlabs Unbound


- [CVE-2019-25032](https://insights.sbomify.com/CVE-2019-25032/): Integer overflow in n/a (critical 9.8)
- [CVE-2019-25033](https://insights.sbomify.com/CVE-2019-25033/): Integer overflow in n/a (critical 9.8)
- [CVE-2019-25034](https://insights.sbomify.com/CVE-2019-25034/): Integer overflow in n/a (critical 9.8)
- [CVE-2019-25035](https://insights.sbomify.com/CVE-2019-25035/): Memory corruption in n/a (critical 9.8)
- [CVE-2019-25038](https://insights.sbomify.com/CVE-2019-25038/): Integer overflow in n/a (critical 9.8)
- [CVE-2019-25039](https://insights.sbomify.com/CVE-2019-25039/): Integer overflow in n/a (critical 9.8)
- [CVE-2019-25042](https://insights.sbomify.com/CVE-2019-25042/): Memory corruption in n/a (critical 9.8)
- [CVE-2026-81642](https://insights.sbomify.com/CVE-2026-81642/): Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (critical 9.1)
- [CVE-2026-33278](https://insights.sbomify.com/CVE-2026-33278/): Possible arbitrary code execution during DNSSEC validation (critical 9.1)
- [CVE-2026-42944](https://insights.sbomify.com/CVE-2026-42944/): Heap overflow with multiple NSID, COOKIE, PADDING EDNS options (high 8.7)
- [CVE-2026-42959](https://insights.sbomify.com/CVE-2026-42959/): Crash during DNSSEC validation of malicious content (high 8.7)
- [CVE-2026-82717](https://insights.sbomify.com/CVE-2026-82717/): CNAME synthesis could lead to heap corruption (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/nlnetlabs/unbound/