Golioth
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Firmware SDK | 3 | – | Feb 26, 2026 |
| Pouch | 1 | – | Feb 26, 2026 |
Exploited and recent CVEs
- CVE-2026-23750 Golioth Pouch (prior to commit 1b2219a1) BLE GATT Heap-based Buffer Overflow 0.2%
- CVE-2026-23749 Golioth Firmware SDK < 0.22.0 Blockwise Transfer Path Out-of-Bounds Read 0.2%
- CVE-2026-23748 Golioth Firmware SDK < 0.22.0 LightDB State Out-of-Bounds Read 0.3%
- CVE-2026-23747 Golioth Firmware SDK < 0.22.0 Payload Utils Stack-based Buffer Overflow 0.3%