26 matches found
CVE-2026-26457
ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coapdumpmsg function when processing COAP messages containing options with zero length...
CVE-2026-26457
The ccoap library (version 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 ) contains a null pointer dereference vulnerability within the coap_dump_msg() function. This flaw is triggered when the software processes COAP messages that include options with zero length . The impact of this vulnerability is...
PT-2026-82514
ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coap dump msg function when processing COAP messages containing options with zero length...
CVE-2026-26457
ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coapdumpmsg function when processing COAP messages containing options with zero length...
EUVD-2026-54221
Contiki-NG's LwM2M TLV parser lwm2mtlvread in os/services/lwm2m/lwm2m-tlv.c ignores its caller-supplied buffer length argument and reads up to six bytes from the input buffer with no bounds check. The caller in lwm2m-engine.c iterates while there is at least one byte remaining, so a crafted CoAP...
CVE-2026-5855 Contiki-NG LwM2M TLV Parser Out-of-Bounds Read via Unchecked Buffer Length in lwm2m_tlv_read
Contiki-NG's LwM2M TLV parser lwm2mtlvread in os/services/lwm2m/lwm2m-tlv.c ignores its caller-supplied buffer length argument and reads up to six bytes from the input buffer with no bounds check. The caller in lwm2m-engine.c iterates while there is at least one byte remaining, so a crafted CoAP...
EUVD-2022-30400
Malicious code in bioql PyPI...
EUVD-2022-36254
Malicious code in bioql PyPI...
CVE-2022-25747
Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message...
CVE-2022-25745
Memory corruption in modem due to improper input validation while handling the incoming CoAP message...
CVE-2024-40493
Null Pointer Dereference in coapclientexchangeblockwise2 function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a specially crafted CoAP packet that causes coapmsggetpayloadresp to return a null pointer, which is then...
CVE-2022-25745
Memory corruption in modem due to improper input validation while handling the incoming CoAP message...
CVE-2022-25747
Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message...
CVE-2022-33211
memory corruption in modem due to improper check while calculating size of serialized CoAP message...
Memory corruption
memory corruption in modem due to improper check while calculating size of serialized CoAP message...
CVE-2022-33211 Improper Input Validation in MODEM
memory corruption in modem due to improper check while calculating size of serialized CoAP message...
CVE-2022-33211 Improper Input Validation in MODEM
memory corruption in modem due to improper check while calculating size of serialized CoAP message...
CVE-2022-25747 Buffer Over-read in MODEM
Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message...
CVE-2022-25747
CVE-2022-25747 affects Qualcomm modem chipsets. The vulnerability is caused by improper input validation during parsing of upcoming CoAP messages, leading to information disclosure. Reported impact indicates high confidentiality impact (C:H/I:N/A:N) with network attack vector and low attack compl...
CVE-2022-25745
CVE-2022-25745 describes memory corruption in a modem caused by improper input validation when handling incoming CoAP messages. The CVE is associated with Qualcomm chipsets/modem firmware; CVSS v3.1 metrics indicate a critical impact (CVSS 9.8, NETWORK attack vector, no privileges or user interac...