CVE-2023-50926

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be caused by an incoming DIO message when using the RPL-Lite implementation in the Contiki-NG operating system. More specifically, the prefix information of the DIO message...

CVE-2023-50926 Unvalidated DIO prefix info length in RPL-Lite in Contiki-NG

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be caused by an incoming DIO message when using the RPL-Lite implementation in the Contiki-NG operating system. More specifically, the prefix information of the DIO message...

CVE-2023-50926

CVE-2023-50926 is an out-of-bounds read in Contiki-NG’s RPL-Lite implementation triggered by an incoming DIO. The issue stems from an unvalidated IPv6 prefix length in DIO Prefix Information, allowing a value longer than the maximum prefix length. This can cause a memcmp on prefixes to read beyon...