CVE-2022-39274

CVE-2022-39274 affects LoRaMac-node before v4.7.0. The issue is a buffer overflow caused by improper size validation of incoming radio frames in ProcessRadioRxDone, allowing a 65280-byte out-of-bounds write. An empty payload can trigger a 1-byte out-of-bounds read of user-controlled content when ...

PT-2022-24862 · Unknown · Loramac-Node

Name of the Vulnerable Software and Affected Versions: LoRaMac-node versions prior to 4.7.0 Description: The issue is caused by improper size validation of incoming radio frames, which can lead to a buffer overflow. Specifically, the function ProcessRadioRxDone expects incoming radio frames to ha...