CVE-2026-5855

Contiki-NG's LwM2M TLV parser lwm2mtlvread in os/services/lwm2m/lwm2m-tlv.c ignores its caller-supplied buffer length argument and reads up to six bytes from the input buffer with no bounds check. The caller in lwm2m-engine.c iterates while there is at least one byte remaining, so a crafted CoAP...

PT-2026-68757

Name of the Vulnerable Software and Affected Versions Contiki-NG affected versions not specified Description The LwM2M TLV parser lwm2m tlv read in os/services/lwm2m/lwm2m-tlv.c fails to validate the caller-supplied buffer length, reading up to six bytes from the input buffer without bounds...

wireshark:fuzzshark_ip_proto-udp: Heap-buffer-overflow in get_utf_8_string

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=4619090352537600 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux...