PT-2023-22773

Name of the Vulnerable Software and Affected Versions Contiki-NG versions 4.8 and prior Description An off-by-one error can be triggered in the Antelope database management system in the Contiki-NG operating system. The problem exists in the Contiki File System CFS backend for the storage of data...

Contiki-NG buffer overflow vulnerability (CNVD-2019-09779)

Contiki-NG is an open source cross-platform operating system for next-generation IoT devices. A buffer overflow vulnerability exists in lvmshiftforoperator in os/storage/antelope/lvm.c in Contiki-NG 4.1 and earlier versions when parsing AQL, which can be exploited by an attacker to cause a denial...

CVE-2018-16663: Out-of-bounds Write

An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in parserelations in os/storage/antelope/aql-parser.c while parsing AQL storage of relations...

CVE-2018-16664: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow in lvmsettype in os/storage/antelope/lvm.c while parsing AQL lvmsetop, lvmsetrelation, lvmsetoperand...

CVE-2018-16666: Out-of-bounds Write

An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in nextstring in os/storage/antelope/aql-lexer.c while parsing AQL parsing next string...

CVE-2018-16665: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow while parsing AQL in lvmshiftforoperator in os/storage/antelope/lvm.c...

CVE-2018-16667: Out-of-bounds Read

An issue was discovered in Contiki-NG through 4.1. There is a buffer over-read in lookup in os/storage/antelope/lvm.c while parsing AQL lvmregistervariable, lvmsetvariablevalue, createintersection, createunion...