Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr (2) GetValueForMACAddr (3) rfc3110_import or (4) CopyNSEC3ResourceRecord function.