CVE-2020-12887

CVE-2020-12887 concerns memory leak in the Arm Mbed OS CoAP library: when using mbed-coap 5.1.5, the sn_coap_parser_options_parse() function parses option numbers by summing previous option numbers and deltas, with 16-bit integers and no overflow checks. This can cause a crafted packet to wrap an...