CContiki-NG

Products

Exploited and recent CVEs

• CVE-2026-5857 High 8.1 Contiki-NG MQTT Client Out-of-Bounds Write in PUBLISH Topic Parser via Persistent State Between TCP Segments 0.9%
• CVE-2026-5856 High 7.1 Contiki-NG DNS/mDNS Resolver Out-of-Bounds Read via Unchecked skip_name Traversal Before Transaction-ID Validation 0.3%
• CVE-2026-5855 High 7.5 Contiki-NG LwM2M TLV Parser Out-of-Bounds Read via Unchecked Buffer Length in lwm2m_tlv_read 0.7%
• CVE-2023-29001 High 8.7 Uncontrolled recursion due to insufficient validation of the IPv6 source routing header in Contiki-NG 0.6%
• CVE-2024-41125 High 8.4 Out-of-bounds read in SNMP when decoding a string in Contiki-NG 0.3%
• CVE-2024-41126 High 8.4 Out-of-bounds read when decoding SNMP messages in Contiki-NG 0.3%
• CVE-2024-47181 High 7.5 Unaligned memory access in RPL option processing in Contiki-NG 0.6%
• CVE-2023-50926 High 7.5 Unvalidated DIO prefix info length in RPL-Lite in Contiki-NG 0.5%
• CVE-2023-50927 High 8.6 Insufficient boundary checks for DIO and DAO messages in RPL-Lite in Contiki-NG 0.5%
• CVE-2023-48229 High 7.0 Out-of-bounds write in the radio driver for Contiki-NG nRF platforms 0.4%
• CVE-2023-37459 Medium 5.3 Out-of-bounds read when processing a received IPv6 packet 0.5%
• CVE-2023-37281 Medium 5.3 Out-of-bounds read during IPHC address decompression 0.5%
• CVE-2023-34101 High 7.3 Contiki-NG vulnerable to out-of-bounds read when processing ICMP DAO input 0.5%
• CVE-2023-34100 High 7.3 Out-of-Bounds Read in contiki-ng 0.4%
• CVE-2023-31129 High 7.5 Contiki-NG missing NULL pointer check in IPv6 neighbor discovery 0.6%
• CVE-2023-30546 Critical 9.8 Contiki-NG has off-by-one error in Antelope DBMS 0.6%
• CVE-2023-28116 High 8.1 Buffer overflow in L2CAP due to misconfigured MTU 0.7%
• CVE-2023-23609 High 8.2 contiki-ng BLE-L2CAP contains Improper size validation of L2CAP frames 0.4%
• CVE-2022-41972 Low 2.9 Contiki-NG contains NULL Pointer Dereference in BLE L2CAP module 0.2%
• CVE-2022-41873 Medium 4.2 Out-of-bounds read and write in BLE L2CAP module 0.3%
• CVE-2022-36054 Medium 6.8 Out-of-bounds write when decompressing 6LoWPAN payload in Contiki-NG 0.8%
• CVE-2022-36052 Medium 5.9 Out-of-bounds read when decompressing UDP header 0.7%
• CVE-2022-36053 Medium 5.9 Out-of-bounds read in the uIP buffer module 0.6%
• CVE-2022-35927 High 8.1 Unverified DIO prefix info lengths in RPL-Classic in Contiki-NG 2.2%
• CVE-2022-35926 Medium 5.9 Out-of-bounds read in IPv6 neighbor solicitation in Contiki-NG 1.3%
• CVE-2021-32771 High 8.1 Buffer overflow in contiki-ng 1.4%
• CVE-2021-21410 High 8.2 Out-of-bounds read in the 6LoWPAN implementation 1.2%
• CVE-2021-21257 High 8.2 Out-of-bounds write in RPL-Classic and RPL-Lite 1.1%
• CVE-2021-21279 High 7.5 Infinite loop in IPv6 neighbor solicitation processing 1.0%
• CVE-2021-21280 High 8.6 Out-of-bounds write when processing 6LoWPAN extension headers 1.1%