CVE-2021-42144

2024-01-2400:00:00

mitre

www.cve.org

contiki-ng

tinydtls

buffer over-read

vulnerability

sensitive information

dtls_ccm_decrypt_message

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.1%

JSON

Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input to dtls_ccm_decrypt_message().

References

seclists.org/fulldisclosure/2024/Jan/17