CVE-2022-36052

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in Contiki-NG may cast a UDP header structure at a certain offset in a packet buffer. The code does not check whether the packet buffer is large enough to fit a full UDP heade...

CVE-2022-36052

creationtimestamp| type| source ---|---|--- 2022-09-01 16:38:06+00:00| seen| https://t.me/cibsecurity/49164...

CVE-2022-36052 Out-of-bounds read when decompressing UDP header

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in Contiki-NG may cast a UDP header structure at a certain offset in a packet buffer. The code does not check whether the packet buffer is large enough to fit a full UDP heade...

CVE-2022-36052

CVE-2022-36052 affects Contiki-NG: the 6LoWPAN UDP header handling may cast a UDP header at an offset without ensuring the buffer can hold it, causing an out-of-bounds read. Affected are Contiki-NG versions prior to 4.8 that may receive 6LoWPAN packets from external parties. The issue is patched ...