lwIP
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| lwIP | 2 | – | Oct 29, 2026 |
| lwIP API | 1 | – | Sep 22, 2026 |
| TCP/IP Stack MQTT | 1 | – | Sep 22, 2026 |
Exploited and recent CVEs
- CVE-2026-119053 lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp_pbuf_stream_writeto() 0.5%
- CVE-2026-112062 lwIP through 2.2.1 Stack Out-of-Bounds Write via mDNS Search Response Handler 0.4%
- CVE-2026-91018 Double Free in lwIP (lightweight IP) 0.4%
- CVE-2026-87121 Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application 0.8%