CVE-2021-21257

Contiki-NG prior to version 4.6 is affected by CVE-2021-21257 due to an out-of-bounds write in the RPL-Classic and RPL-Lite implementations. The bug occurs in rpl_ext_header_srh_update where addr_ptr is derived from an unvalidated CMPR field in the RPL source routing header, enabling out-of-bound...

CVE-2021-21257 Out-of-bounds write in RPL-Classic and RPL-Lite

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. The RPL-Classic and RPL-Lite implementations in the Contiki-NG operating system versions prior to 4.6 do not validate the address pointer in the RPL source routing header This makes it possible for an...

CVE-2021-21257: Out-of-bounds Write

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. The RPL-Classic and RPL-Lite implementations in the Contiki-NG operating system versions prior to 4.6 do not validate the address pointer in the RPL source routing header This makes it possible for an...