Libcoap

16 CVEs across 1 Libcoap products. Browse Libcoap vulnerabilities, severities, and proof-of-concept exploits.

Libcoap products with known CVEs

ProductCVEs
Libcoap16
Libcoap CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-29013Critical9.82026-04-17libcoap contains out-of-bounds read vulnerabilities in OSCORE Appendix B.2 CBOR unwrap handling where get_byte_inc() in src/oscore/oscore_cbor.c relies solely…
CVE-2025-34468Critical9.82025-12-31libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostn…
CVE-2025-59391Medium6.52025-12-08A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches. An out-of-bounds read may occur when…
CVE-2025-65501Medium4.32025-11-24Null pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a DTLS handshake where SSL…
CVE-2025-65500Medium4.32025-11-24NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a…
CVE-2025-65499Medium4.32025-11-24Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS…
CVE-2025-65498Medium4.32025-11-24NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a…
CVE-2025-65497Medium4.32025-11-24NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a…
CVE-2025-65496Medium4.32025-11-24NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a…
CVE-2025-65495High7.52025-11-24Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a craft…
CVE-2025-65494High7.52025-11-24NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a cr…
CVE-2025-65493High7.52025-11-24NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS/TLS connection tha…
CVE-2024-31031High7.52024-04-17An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow.
CVE-2024-0962Medium6.32024-01-27A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file src/coap_osc…
CVE-2023-30362High7.52023-06-23Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive info…
CVE-2023-35862Medium6.52023-06-19libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c.