CVE-2026-23749

Golioth Firmware SDK version 0.19.1 prior to 0.22.0, fixed in commit 0e788217, contain an out-of-bounds read due to improper null termination of a blockwise transfer path. blockwisetransferinit accepts a path whose length equals CONFIGGOLIOTHCOAPMAXPATHLEN and copies it using strncpy without...

CVE-2026-23749

creationtimestamp| type| source ---|---|--- 2026-02-26 20:02:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfryhekuub2n...