contiki-ng vulnerabilities

CVEs per yearBy the year they were published

1. 20216
2. 20228
3. 20238
4. 20247
5. 20263

Newest CVEs

• CVE-2026-5857

  Contiki-NG MQTT Client Out-of-Bounds Write in PUBLISH Topic Parser via Persistent State Between TCP Segments

  Contiki-NG · Contiki-NG

  Critical9.2
• CVE-2026-5856

  Contiki-NG DNS/mDNS Resolver Out-of-Bounds Read via Unchecked skip_name Traversal Before Transaction-ID Validation

  Contiki-NG · Contiki-NG

  High7.1
• CVE-2026-5855

  Contiki-NG LwM2M TLV Parser Out-of-Bounds Read via Unchecked Buffer Length in lwm2m_tlv_read

  Contiki-NG · Contiki-NG

  High8.7
• CVE-2023-29001

  Uncontrolled recursion due to insufficient validation of the IPv6 source routing header in Contiki-NG

  contiki-ng · contiki-ng

  High8.7
• CVE-2024-41125

  Out-of-bounds read in SNMP when decoding a string in Contiki-NG

  contiki-ng · contiki-ng

  High8.4
• CVE-2024-41126

  Out-of-bounds read when decoding SNMP messages in Contiki-NG

  contiki-ng · contiki-ng

  High8.4
• CVE-2024-47181

  Unaligned memory access in RPL option processing in Contiki-NG

  contiki-ng · contiki-ng

  High7.5
• CVE-2023-50926

  Unvalidated DIO prefix info length in RPL-Lite in Contiki-NG

  contiki-ng · contiki-ng

  High7.5
• CVE-2023-50927

  Insufficient boundary checks for DIO and DAO messages in RPL-Lite in Contiki-NG

  contiki-ng · contiki-ng

  High8.6
• CVE-2023-48229

  Out-of-bounds write in the radio driver for Contiki-NG nRF platforms

  contiki-ng · contiki-ng

  High7.0