CVE-2022-36054

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating system file os/net/ipv6/sicslowpan.c contains an input function that processes incoming packets and copies them into a packet buffer. Because of a...

CVE-2022-36054

CVE-2022-36054ffects Contiki-NG: the 6LoWPAN processing in os/net/ipv6/sicslowpan.c uses an input function that copies packets into a buffer without proper length checking, enabling an out-of-bounds write when handling sufficiently large unfragmented packets or the first fragment of a fragmented ...

CVE-2022-36054 Out-of-bounds write when decompressing 6LoWPAN payload in Contiki-NG

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating system file os/net/ipv6/sicslowpan.c contains an input function that processes incoming packets and copies them into a packet buffer. Because of a...