# CVE-2026-50216: Akamai Guardicore Platform Agent integer underflow in DNS proxy

Source: https://junglewise.ai/threats/cve-2026-50216-an-integer-underflow-exists-in-the-dns-proxy-component-of-the  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-14. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-50216 · Severity: medium · CVSS 5.3 · Published 2026-10-14

Akamai Guardicore Platform Agent is a macOS security agent that monitors and controls network traffic. A flaw in its DNS proxy component can be triggered by sending a specially crafted short UDP packet, causing the agent to crash and disabling network protections on the affected system.

Technologies: [Akamai Guardicore Platform Agent](https://junglewise.ai/threats/technologies/guardicore-platform-agent). Vendors: [Akamai](https://junglewise.ai/threats/vendors/akamai).

## Quick answers

**Is CVE-2026-50216 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-50216 being exploited in the wild.

**How severe is CVE-2026-50216?** Medium severity, with a CVSS score of 5.3, published 14 October 2026.

**Which products and versions are affected?** Akamai Guardicore Platform Agent versions prior to 7.4.2-v53.6.1.

**Is there a fix for CVE-2026-50216?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-50216 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-50216?** Check whether you run Akamai Guardicore Platform Agent at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An integer underflow in the macOS NetworkExtension system extension's DNS proxy component occurs when processing UDP datagrams shorter than 96 bytes with a specific starting value. The size computation underflows to near SIZE_MAX, triggering a memory allocation failure and uncaught Objective-C exception that terminates the root system extension.

## Affected products

- Akamai Guardicore Platform Agent versions prior to 7.4.2-v53.6.1

## Timeline

- 2026-10-14: disclosed

## References

- [https://techdocs.akamai.com/guardicore-platform-agent/changelog/](https://techdocs.akamai.com/guardicore-platform-agent/changelog/)
- [https://www.akamai.com/newsroom/security-advisories/guardicore-platform-agent-7-4](https://www.akamai.com/newsroom/security-advisories/guardicore-platform-agent-7-4)

## Related threats

- [Akamai Guardicore Platform Agent improper JWT validation](https://junglewise.ai/threats/cve-2026-50218-akamai-gpa-guardicore-platform-agent-client-on-all-platforms)
- [Akamai Guardicore Platform Agent use-after-free in WFP callout driver](https://junglewise.ai/threats/cve-2026-50217-a-use-after-free-vulnerability-in-the-windows-wfp-callout-driver)
- [Akamai Guardicore Platform Agent use-after-free in WFP driver](https://junglewise.ai/threats/cve-2026-50215-a-use-after-free-exists-in-the-windows-wfp-packet-capture-driver)
- [Akamai Guardicore Platform Agent command injection in wapptunneld](https://junglewise.ai/threats/cve-2026-46449-the-akamai-guardicore-platform-agent-gpa-before-7-4-for-macos-is)
- [Akamai Guardicore Platform Agent local privilege escalation](https://junglewise.ai/threats/cve-2026-34354-akamai-guardicore-platform-agent-local-privilege-escalation)