CVE-2019-17211

An integer overflow was discovered in the CoAP library in Arm Mbed OS 5.14.0. The function sncoapbuildercalcneededpacketdatasize2 is used to calculate the required memory for the CoAP message from the sncoaphdrs data structure. Both returnedbytecount and srccoapmsgptr-payloadlen are of type...

CVE-2019-17211

CVE-2019-17211 affects Arm Mbed OS 5.14.0 CoAP library. The overflow occurs in sn_coap_builder_calc_needed_packet_data_size_2 when computing memory for a CoAP message: returned_byte_count and payload_len are uint16_t and their sum can wrap around, causing insufficient buffer space. Documents conf...