CVE-2026-5857

Contiki-NG's MQTT client parsepublishvhdr in os/net/app-layer/mqtt/mqtt.c sets topiclenreceived=1 before checking topiclen against the 64-byte limit, so an over-length topic returns early but leaves the flag set. On the next TCP segment, tcpinput re-invokes the parser with topicreceived==0, and t...

PT-2026-68759

Name of the Vulnerable Software and Affected Versions Contiki-NG affected versions not specified Description The MQTT client contains a flaw in the parse publish vhdr function within os/net/app-layer/mqtt/mqtt.c. The function sets the topic len received flag to 1 before validating the topic len...

CVE-2017-7372: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or write to arbitrary pointer location...