345 matches found
CVE-2025-50518
CVE-2025-50518 affects libcoap: use-after-free in the function coap_delete_pdu_lkd (in coap_pdu.c). Root cause: improper handling of memory after freeing a PDU object, leading to memory corruption and potential arbitrary code execution. Reported impact is severe (CVSSv3.1 base score 9.8, CRITICAL...
CVE-2025-50518
A use-after-free vulnerability exists in the coapdeletepdulkd function within coappdu.c of the libcoap library. This issue occurs due to improper handling of memory after the freeing of a PDU object, leading to potential memory corruption or the possibility of executing arbitrary code. NOTE: this...
libcoap 安全漏洞
libcoap is a C implementation of a lightweight application protocol open-sourced by obgm. A security vulnerability exists in libcoap, which stems from a post-release reuse issue in the coapdeletepdulkd function that could lead to memory corruption or execution of arbitrary code...
PT-2025-33305
Name of the Vulnerable Software and Affected Versions: libcoap affected versions not specified Description: A use-after-free issue exists in the coap delete pdu lkd function within coap pdu.c. This occurs due to improper memory handling after a PDU object is freed, potentially leading to memory...
[SECURITY] Fedora 42 Update: qt6-qtcoap-6.9.1-1.fc42
Qt CoAP API provides classes and functions to access the CoAP protocol...
CVE-2020-36444
An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard without trait bounds on RC...
CVE-2019-9750
In IoTivity through 1.3.1, the CoAP server interface can be used for Distributed Denial of Service attacks using source IP address spoofing and UDP-based traffic amplification. The reflected traffic is 6 times bigger than spoofed requests. This occurs because the construction of a "4.01...
CVE-2022-25747
Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message...
CVE-2022-25745
Memory corruption in modem due to improper input validation while handling the incoming CoAP message...
CVE-2022-25678
Memory correction in modem due to buffer overwrite during coap connection...
CVE-2022-33211
memory corruption in modem due to improper check while calculating size of serialized CoAP message...
CVE-2024-40493
Null Pointer Dereference in coapclientexchangeblockwise2 function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a specially crafted CoAP packet that causes coapmsggetpayloadresp to return a null pointer, which is then...
CVE-2024-40493
Null Pointer Dereference in coapclientexchangeblockwise2 function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a specially crafted CoAP packet that causes coapmsggetpayloadresp to return a null pointer, which is then...
CVE-2024-40493
CVE-2024-40493 concerns FreeCoAP 1.0. Affects the function coap_client_exchange_blockwise2, where a null pointer dereference of coap_msg_get_payload(resp) can occur if a crafted CoAP packet is processed, leading to a denial of service and potential arbitrary code execution via memcpy. Multiple so...
CVE-2024-40493
Null Pointer Dereference in coapclientexchangeblockwise2 function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a specially crafted CoAP packet that causes coapmsggetpayloadresp to return a null pointer, which is then...
CVE-2024-40493
Null Pointer Dereference in coapclientexchangeblockwise2 function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a specially crafted CoAP packet that causes coapmsggetpayloadresp to return a null pointer, which is then...
DEBIAN-CVE-2024-46304
A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a denial of service via the coaphandlerequestputblock function in src/coapblock.c...
UBUNTU-CVE-2024-46304
A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a denial of service via the coaphandlerequestputblock function in src/coapblock.c...
Fedora: Security Advisory for qt6-qtcoap (FEDORA-2024-bfb8617ba3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...