4 matches found
CVE-2026-119053
lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...
CVE-2026-119053 lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp_pbuf_stream_writeto()
lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...
CVE-2026-119053
The lwIP stack, versions 2.0.0 through 2.2.1 built with the SNMP agent , contains an out-of-bounds read vulnerability in the snmp_pbuf_stream_writeto() function. The root cause is that the function performs bounds copies using pbuf->len instead of the actual remaining bytes. Remote unauthentic...
EUVD-2026-112819
lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto that bounds copies by pbuf-len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent...