CVE-2026-119053

A flaw was found in lwIP. The Simple Network Management Protocol SNMP agent contains an out-of-bounds read vulnerability in the snmppbufstreamwriteto function due to improper buffer bounds calculation during copy operations. A remote unauthenticated attacker with knowledge of the read community...

CVE-2026-113783

ESP-IDF is the Espressif Internet of Things IOT Development Framework. From 5.2.3 until 5.3.7, 5.4.5, 5.5.6, and 6.0.3, the lwIP DNS resolver's cached-lookup path in dnslookup in dns.c copies every cached address into a caller-provided single ipaddrt output buffer without a length parameter or...

CVE-2026-113783 ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responses

ESP-IDF is the Espressif Internet of Things IOT Development Framework. From 5.2.3 until 5.3.7, 5.4.5, 5.5.6, and 6.0.3, the lwIP DNS resolver's cached-lookup path in dnslookup in dns.c copies every cached address into a caller-provided single ipaddrt output buffer without a length parameter or...

CVE-2026-113783

The ESP-IDF (Espressif Internet of Things Development Framework) contains a stack-based buffer overflow in the lwIP DNS resolver 's cached-lookup path within dns_lookup() in dns.c. When CONFIG_LWIP_DNS_MAX_HOST_IP is greater than 1 and a cached hostname contains multiple A or AAAA records, the sy...

CVE-2026-113783 ESP-IDF: Stack-based memory corruption in lwIP DNS/SNTP handling for multi-IP DNS responses

ESP-IDF is the Espressif Internet of Things IOT Development Framework. From 5.2.3 until 5.3.7, 5.4.5, 5.5.6, and 6.0.3, the lwIP DNS resolver's cached-lookup path in dnslookup in dns.c copies every cached address into a caller-provided single ipaddrt output buffer without a length parameter or...

PT-2026-137101

ESP-IDF is the Espressif Internet of Things IOT Development Framework. From 5.2.3 until 5.3.7, 5.4.5, 5.5.6, and 6.0.3, the lwIP DNS resolver's cached-lookup path in dns lookup in dns.c copies every cached address into a caller-provided single ip addr t output buffer without a length parameter or...

lwip-snmpv3-stack-overflow-cve-2026-8836-critical-embedded-rce

CVE-2026-8836 — lwIP SNMPv3 Stack Overflow PoC Proof of concept exploit for CVE-2026-8836, a critical stack-based buffer overflow in lwIP's SNMPv3 USM handler. Vulnerability CVE : CVE-2026-8836 CVSS : 9.8 Critical Component : snmpparseinboundframe in src/apps/snmp/snmpmsg.c Root Cause :...

CVE-2026-119053

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...

Linux Distros Unpatched Vulnerability : CVE-2026-119053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead ...

CVE-2026-119053

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...

DEBIAN-CVE-2026-119053

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...

CVE-2026-119053

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...

UBUNTU-CVE-2026-119053

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...

CVE-2026-119053 lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp_pbuf_stream_writeto()

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...

CVE-2026-119053

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...

CVE-2026-119053 lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp_pbuf_stream_writeto()

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...

CVE-2026-119053 lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp_pbuf_stream_writeto()

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...

CVE-2026-119053

The lwIP stack, versions 2.0.0 through 2.2.1 built with the SNMP agent , contains an out-of-bounds read vulnerability in the snmp_pbuf_stream_writeto() function. The root cause is that the function performs bounds copies using pbuf->len instead of the actual remaining bytes. Remote unauthentic...

EUVD-2026-112819

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...

PT-2026-132127

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmp pbuf stream writeto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...