CVE-2023-24822

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a NULL pointer dereference while encoding a 6LoWPAN IPHC header. Th...

CVE-2023-24822 RIOT-OS vulnerable to Null Pointer dereference during IPHC encoding

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a NULL pointer dereference while encoding a 6LoWPAN IPHC header. Th...

CVE-2023-24822

CVE-2023-24822 affects RIOT-OS: the network stack processing 6LoWPAN frames is vulnerable to a NULL-pointer dereference when encoding the 6LoWPAN IPHC header, prior to version 2022.10. Exploitation results in a hard fault and denial of service. The issue is fixed in version 2022.10; a manual patc...