EUVD-2026-54221

Contiki-NG's LwM2M TLV parser lwm2mtlvread in os/services/lwm2m/lwm2m-tlv.c ignores its caller-supplied buffer length argument and reads up to six bytes from the input buffer with no bounds check. The caller in lwm2m-engine.c iterates while there is at least one byte remaining, so a crafted CoAP...

EUVD-2022-30400

Malicious code in bioql PyPI...

EUVD-2022-36254

Malicious code in bioql PyPI...

CVE-2022-25747

Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message...

CVE-2022-25745

Memory corruption in modem due to improper input validation while handling the incoming CoAP message...

CVE-2024-40493

Null Pointer Dereference in coapclientexchangeblockwise2 function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a specially crafted CoAP packet that causes coapmsggetpayloadresp to return a null pointer, which is then...

CVE-2022-25747

Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message...

CVE-2022-25745

Memory corruption in modem due to improper input validation while handling the incoming CoAP message...

CVE-2022-33211

memory corruption in modem due to improper check while calculating size of serialized CoAP message...

Memory corruption

memory corruption in modem due to improper check while calculating size of serialized CoAP message...

CVE-2022-33211 Improper Input Validation in MODEM

memory corruption in modem due to improper check while calculating size of serialized CoAP message...

CVE-2022-33211 Improper Input Validation in MODEM

memory corruption in modem due to improper check while calculating size of serialized CoAP message...

CVE-2022-25747 Buffer Over-read in MODEM

Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message...

CVE-2022-25747

CVE-2022-25747 affects Qualcomm modem chipsets. The vulnerability is caused by improper input validation during parsing of upcoming CoAP messages, leading to information disclosure. Reported impact indicates high confidentiality impact (C:H/I:N/A:N) with network attack vector and low attack compl...

CVE-2022-25745

CVE-2022-25745 describes memory corruption in a modem caused by improper input validation when handling incoming CoAP messages. The CVE is associated with Qualcomm chipsets/modem firmware; CVSS v3.1 metrics indicate a critical impact (CVSS 9.8, NETWORK attack vector, no privileges or user interac...

CVE-2022-25745 Always Incorrect Control Flow Implementation in MODEM

Memory corruption in modem due to improper input validation while handling the incoming CoAP message...

CVE-2022-25745 Always Incorrect Control Flow Implementation in MODEM

Memory corruption in modem due to improper input validation while handling the incoming CoAP message...

OSV-2021-386 Stack-buffer-overflow in ot::Coap::Message::AppendUintOption

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30831 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::Coap::Message::AppendUintOption ot::Coap::Message::AppendBlockOption otCoapMessageAppendBlock2Option...