CVE-2020-12884

A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparsemultipleoptions parses CoAP options that may occur multiple consecutive times in a single packet. While processing th...

CVE-2020-12884

CVE-2020-12884 affects Arm Mbed OS 5.15.3 CoAP library. The CoAP parser option handling (sn_coap_parser_options_parse_multiple_options) can read past the packet boundary: packet_data_pptr is advanced by option_len without a prior out-of-bounds check, while temp_parsed_uri_query_ptr validation use...