Contiki-ng vulnerabilities
32 CVEs and advisories name Contiki-ng as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-5857Contiki-NG MQTT Client Out-of-Bounds Write in PUBLISH Topic Parser via Persistent State Between TCP Segments
- CVE-2026-5856Contiki-NG DNS/mDNS Resolver Out-of-Bounds Read via Unchecked skip_name Traversal Before Transaction-ID Validation
- CVE-2026-5855Contiki-NG LwM2M TLV Parser Out-of-Bounds Read via Unchecked Buffer Length in lwm2m_tlv_read
- CVE-2023-29001Uncontrolled recursion due to insufficient validation of the IPv6 source routing header in Contiki-NG
- CVE-2024-41125Out-of-bounds read in SNMP when decoding a string in Contiki-NG
- CVE-2024-41126Out-of-bounds read when decoding SNMP messages in Contiki-NG
- CVE-2024-47181Unaligned memory access in RPL option processing in Contiki-NG
- CVE-2023-50926Unvalidated DIO prefix info length in RPL-Lite in Contiki-NG
- CVE-2023-50927Insufficient boundary checks for DIO and DAO messages in RPL-Lite in Contiki-NG
- CVE-2023-48229Out-of-bounds write in the radio driver for Contiki-NG nRF platforms
- CVE-2023-37459Out-of-bounds read when processing a received IPv6 packet
- CVE-2023-37281Out-of-bounds read during IPHC address decompression
- CVE-2023-34101Contiki-NG vulnerable to out-of-bounds read when processing ICMP DAO input
- CVE-2023-34100Out-of-Bounds Read in contiki-ng
- CVE-2023-31129Contiki-NG missing NULL pointer check in IPv6 neighbor discovery
- CVE-2023-30546Contiki-NG has off-by-one error in Antelope DBMS
- CVE-2023-28116Buffer overflow in L2CAP due to misconfigured MTU
- CVE-2023-23609contiki-ng BLE-L2CAP contains Improper size validation of L2CAP frames
- CVE-2022-41972Contiki-NG contains NULL Pointer Dereference in BLE L2CAP module
- CVE-2022-41873Out-of-bounds read and write in BLE L2CAP module
- CVE-2022-36054Out-of-bounds write when decompressing 6LoWPAN payload in Contiki-NG
- CVE-2022-36052Out-of-bounds read when decompressing UDP header
- CVE-2022-36053Out-of-bounds read in the uIP buffer module
- CVE-2022-35927Unverified DIO prefix info lengths in RPL-Classic in Contiki-NG
- CVE-2022-35926Out-of-bounds read in IPv6 neighbor solicitation in Contiki-NG
- CVE-2021-32771Buffer overflow in contiki-ng
- CVE-2021-21410Out-of-bounds read in the 6LoWPAN implementation
- CVE-2021-21257Out-of-bounds write in RPL-Classic and RPL-Lite
- CVE-2021-21279Infinite loop in IPv6 neighbor solicitation processing
- CVE-2021-21280Out-of-bounds write when processing 6LoWPAN extension headers