lwIP

Products

ProductCVEsExploitedLatest
lwIP2–Oct 29, 2026
lwIP API1–Sep 22, 2026
TCP/IP Stack MQTT1–Sep 22, 2026

Exploited and recent CVEs

  • CVE-2026-119053 Medium 5.3 lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp_pbuf_stream_writeto() 0.5%
  • CVE-2026-112062 Medium 5.9 lwIP through 2.2.1 Stack Out-of-Bounds Write via mDNS Search Response Handler 0.4%
  • CVE-2026-91018 High 8.8 Double Free in lwIP (lightweight IP) 0.4%
  • CVE-2026-87121 Critical 9.8 Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application 0.8%