diff -ru dnsdist-2.0.3.orig/dnsdist-backend.cc dnsdist-2.0.3.CVE-2026-33602/dnsdist-backend.cc
--- dnsdist-2.0.3.orig/dnsdist-backend.cc	2026-03-12 16:00:00.000000000 +0100
+++ dnsdist-2.0.3.CVE-2026-33602/dnsdist-backend.cc	2026-04-03 15:53:53.639780814 +0200
@@ -571,7 +571,7 @@
 
   do {
     uint16_t selectedID = (idOffset++) % idStates.size();
-    IDState& ids = idStates[selectedID];
+    IDState& ids = idStates.at(selectedID);
     auto guard = ids.acquire();
     if (!guard) {
       continue;
@@ -615,7 +615,7 @@
     return;
   }
 
-  auto& ids = idStates[id];
+  auto& ids = idStates.at(id);
   auto guard = ids.acquire();
   if (!guard) {
     /* already used */
@@ -654,11 +654,11 @@
     return result;
   }
 
-  if (id > idStates.size()) {
+  if (id >= idStates.size()) {
     return result;
   }
 
-  auto& ids = idStates[id];
+  auto& ids = idStates.at(id);
   auto guard = ids.acquire();
   if (!guard) {
     return result;