Libcoap
2 CVEs across 1 Libcoap products. Browse Libcoap vulnerabilities, severities, and proof-of-concept exploits.
Libcoap products with known CVEs
Libcoap CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-29013 | Critical | 9.8 | 2026-04-17 | libcoap contains out-of-bounds read vulnerabilities in OSCORE Appendix B.2 CBOR unwrap handling where get_byte_inc() in src/oscore/oscore_cbor.c relies solely… |
CVE-2025-34468 | Critical | 9.8 | 2025-12-31 | libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostn… |
CVE-2025-59391 | Medium | 6.5 | 2025-12-08 | A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches. An out-of-bounds read may occur when… |
CVE-2025-65501 | Medium | 4.3 | 2025-11-24 | Null pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a DTLS handshake where SSL… |
CVE-2025-65500 | Medium | 4.3 | 2025-11-24 | NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a… |
CVE-2025-65499 | Medium | 4.3 | 2025-11-24 | Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS… |
CVE-2025-65498 | Medium | 4.3 | 2025-11-24 | NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a… |
CVE-2025-65497 | Medium | 4.3 | 2025-11-24 | NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a… |
CVE-2025-65496 | Medium | 4.3 | 2025-11-24 | NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a… |
CVE-2025-65495 | High | 7.5 | 2025-11-24 | Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a craft… |
CVE-2025-65494 | High | 7.5 | 2025-11-24 | NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a cr… |
CVE-2025-65493 | High | 7.5 | 2025-11-24 | NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS/TLS connection tha… |
CVE-2024-31031 | High | 7.5 | 2024-04-17 | An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow. |
CVE-2024-0962 | Medium | 6.3 | 2024-01-27 | A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file src/coap_osc… |
CVE-2023-30362 | High | 7.5 | 2023-06-23 | Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive info… |
CVE-2023-35862 | Medium | 6.5 | 2023-06-19 | libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c. |