CVE-2020-11068

CVE-2020-11068 affects LoRaMac-node prior to 4.4.4. The issue is a reception buffer overflow caused by the received buffer size not being checked (root cause: unchecked buffer size). The vulnerability is mitigated by upgrading to version 4.4.4, which contains the fix. Public references in the con...

CVE-2022-39274

CVE-2022-39274 affects LoRaMac-node before v4.7.0. The issue is a buffer overflow caused by improper size validation of incoming radio frames in ProcessRadioRxDone, allowing a 65280-byte out-of-bounds write. An empty payload can trigger a 1-byte out-of-bounds read of user-controlled content when ...