OSV-2020-732 Stack-buffer-overflow in ot::MeshCoP::Leader::HandlePetition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13537 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::MeshCoP::Leader::HandlePetition ot::Coap::CoapBase::ProcessReceivedRequest ot::Ip6::Udp::HandleMessage...

OSV-2020-626 UNKNOWN READ in ot::Buffer::GetNextBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13412 Crash type: UNKNOWN READ Crash state: ot::Buffer::GetNextBuffer ot::MessagePool::FreeBuffers ot::Coap::ResponsesQueue::DequeueAllResponses...

OSV-2020-597 UNKNOWN READ in ot::MessageQueue::GetHead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13386 Crash type: UNKNOWN READ Crash state: ot::MessageQueue::GetHead ot::Coap::CoapBase::ClearRequestsAndResponses ot::Coap::CoapSecure::Stop...

OSV-2020-528 Stack-buffer-overflow in ot::Message::Read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17330 Crash type: Stack-buffer-overflow WRITE Crash state: ot::Message::Read ot::NetworkData::Leader::HandleCommissioningGet ot::Coap::CoapBase::ProcessReceivedRequest...

PT-2020-22434

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions, including not::Buffer::GetNextBuffer,...

PT-2020-22380

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A stack-buffer-overflow crash has been reported, specifically a WRITE crash. The crash occurs in the following functions: not::Message::Read,...

PT-2020-22340

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the not::Ip6::Address::FromString,...

PT-2020-22504

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack buffer overflow error. Technical details include a crash type of Stack-buffer-overflow READ 1. The crash state involves...

PT-2020-22418

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported, classified as an UNKNOWN READ. The crash state includes functions such as not::MessageQueue::GetHead,...

PT-2020-22238

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A stack-buffer-overflow read issue is reported, potentially causing a crash. The crash occurs in the not::NetworkData::Leader::SendCommissioningGetResponse...

ARM Mbed OS CoAP library input validation error vulnerability (CNVD-2021-20270)

ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from ARM in the U.K. The CoAP library is one of the Constrained Application Protocol CoAP libraries. An input validation error vulnerability exists in the CoAP library in ARM Mbed OS version...

ARM Mbed OS Denial of Service Vulnerability

ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from ARM in the U.K. The CoAP library is one of the Constrained Application Protocol CoAP libraries. A security vulnerability exists in the CoAP library parser in ARM Mbed OS version 5.15.3. A...

ARM Mbed OS CoAP library buffer overflow vulnerability (CNVD-2021-20267)

ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from ARM in the U.K. The CoAP library is one of the Constrained Application Protocol CoAP libraries. A buffer overflow vulnerability exists in the CoAP library in ARM Mbed OS version 5.15.3. A...

ARM Mbed OS CoAP library buffer overflow vulnerability (CNVD-2021-20269)

ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from ARM in the U.K. The CoAP library is one of the Constrained Application Protocol CoAP libraries. A buffer overflow vulnerability exists in the CoAP library in ARM Mbed OS version 5.15.3. A...

ARM Mbed OS CoAP library buffer overflow vulnerability (CNVD-2021-20266)

ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from ARM in the U.K. The CoAP library is one of the Constrained Application Protocol CoAP libraries. A buffer overflow vulnerability exists in the CoAP library in ARM Mbed OS version 5.15.3. A...

CVE-2020-12887

Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP option number field of all options present in the input packet...

CVE-2020-12886

A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP packet header starting from the message token. The length of the token in the received message is...

CVE-2020-12886

A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP packet header starting from the message token. The length of the token in the received message is...

CVE-2020-12887

Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP option number field of all options present in the input packet...

CVE-2020-12885

An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparsemultipleoptions parses CoAP options in a while loop. This loop's exit condition is computed using the previously...