CVE-2021-21281

Contiki-NG contains a buffer overflow vulnerability in versions prior to 4.6 tied to unvalidated TCP data offsets after a tcp-socket is established. The remote end can send a packet with an unvalidated data offset, potentially leading to memory corruption or denial of service. A fix was introduce...

CVE-2021-21281 Buffer overflow due to unvalidated TCP data offset

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. A buffer overflow vulnerability exists in Contiki-NG versions prior to 4.6. After establishing a TCP socket using the tcp-socket library, it is possible for the remote end to send a packet with a data...