diff -ru dnsdist-1.9.12.orig/dnsparser.cc dnsdist-1.9.12.CVE-2026-33598/dnsparser.cc
--- dnsdist-1.9.12.orig/dnsparser.cc	2026-03-13 16:09:16.000000000 +0100
+++ dnsdist-1.9.12.CVE-2026-33598/dnsparser.cc	2026-04-03 15:36:49.526017631 +0200
@@ -1223,13 +1223,12 @@
       uint32_t dnsttl = reader.get32BitInt();
       uint16_t contentLength = reader.get16BitInt();
       uint16_t pos = reader.getPosition();
+      reader.skip(contentLength);
 
       bool done = visitor(section, dnsclass, dnstype, dnsttl, contentLength, &packet.at(pos));
       if (done) {
         return true;
       }
-
-      reader.skip(contentLength);
     }
   }
   catch (...) {