CVE-2026-5855

Contiki-NG's LwM2M TLV parser lwm2mtlvread in os/services/lwm2m/lwm2m-tlv.c ignores its caller-supplied buffer length argument and reads up to six bytes from the input buffer with no bounds check. The caller in lwm2m-engine.c iterates while there is at least one byte remaining, so a crafted CoAP...

PT-2026-68757

Name of the Vulnerable Software and Affected Versions Contiki-NG affected versions not specified Description The LwM2M TLV parser lwm2m tlv read in os/services/lwm2m/lwm2m-tlv.c fails to validate the caller-supplied buffer length, reading up to six bytes from the input buffer without bounds...