EUVD-2025-198708

NULL pointer dereference in coapdtlsgeneratecookie in src/coapopenssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSLgetSSLCTX to return NULL...

PT-2025-47909

Name of the Vulnerable Software and Affected Versions OISM libcoap version 4.3.5 Description An integer signedness error exists in the tls verify call back function located in src/coap openssl.c. This flaw allows remote attackers to potentially cause a denial of service by providing a specially...