Browse CVEs

CRITICAL 9.8 CVE-2026-29013 libcoap contains out-of-bounds read vulnerabilities in OSCORE Appendix B.2 CBOR unwrap handling where get_byte_inc() in src/oscore/oscore_cbor.c reli… Libcoap 4.3.5b+ Fix from $2,3002026-04-17 CRITICAL 9.8 CVE-2025-34468 libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-contro… Libcoap after 4.3.5 Fix from $2,3002025-12-31 MEDIUM 6.5 CVE-2025-59391 A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches. An out-of-bounds read may … Libcoap 4.3.5a+ Fix from $1,6002025-12-08 HIGH 7.5 CVE-2025-65495 Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service v… Libcoap Patch available Fix from $1,9502025-11-24 HIGH 7.5 CVE-2025-65493 NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS/TLS conn… Libcoap Patch available Fix from $1,9502025-11-24 HIGH 7.5 CVE-2025-65494 NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of servic… Libcoap Patch available Fix from $1,9502025-11-24 HIGH 7.8 CVE-2024-0962 A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file sr… Libcoap Patch available Fix from $1,9502024-01-27 HIGH 7.5 CVE-2023-30362 Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sens… Libcoap 4.3.1-120-ge242200+ Fix from $1,9502023-06-23 MEDIUM 6.5 CVE-2023-35862 libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c. Libcoap Patch available Fix from $1,6002023-06-19