TI-2020-14885 CVE-2020-24336 · GHSA-37q6-vw96-q6q8
An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5.
Priority HIGH 76
An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5.
contiki-ng
Records57All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical27CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9
Exploited now
contiki-ng records in CISA KEVNo contiki-ng vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
57 records
TI-2021-18649 CVE-2021-42142 · GHSA-q37p-g696-qhwm
An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97.
Priority MEDIUM 51
An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97.
TI-2020-16751 CVE-2020-27634 · GHSA-pw9j-jvfg-9ppw
In Contiki 4.5, TCP ISNs are improperly random.
Priority MEDIUM 51
In Contiki 4.5, TCP ISNs are improperly random.
TI-2018-16029 CVE-2018-1000804 · GHSA-r7x6-mvwq-vr59
contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL (Antelope Query…
Priority MEDIUM 51
contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL (Antelope Query Language) database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system.
TI-2018-13749 CVE-2018-19417 · GHSA-cxvc-6cjq-88vx
An issue was discovered in the MQTT server in Contiki-NG before 4.2.
Priority MEDIUM 51
An issue was discovered in the MQTT server in Contiki-NG before 4.2.
Priority MEDIUM 50
Contiki-NG is an operating system for Internet of Things devices.
Priority MEDIUM 49
The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message handling code for IPv6 router solicitiations.
TI-2021-18651 CVE-2021-42144 · GHSA-7r27-33fg-9cpx
Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97…
Priority MEDIUM 49
Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input to dtls_ccm_decrypt_message().
TI-2026-05136 CVE-2026-5857 · GHSA-x5g5-4jq8-vj28
Contiki-NG MQTT Client Out-of-Bounds Write in PUBLISH Topic Parser via Persistent State Between TCP Segments
Priority MEDIUM 47
Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets topic_len_received=1 before checking topic_len against the 64-byte limit, so an over-length topic returns early but leaves the flag set.
Priority MEDIUM 47
Contiki-NG is an open-source, cross-platform operating system for IoT devices.
TI-2021-18654 CVE-2021-42147 · GHSA-9vpc-ch84-fc8h
Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS…
Priority MEDIUM 47
Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cause a denial of service via crafted data packet.
TI-2020-11746 CVE-2020-14935 · GHSA-cvph-4f6c-4mg7
Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get…
Priority MEDIUM 47
Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get request response encoding function.
TI-2023-16947 CVE-2023-34101
Contiki-NG vulnerable to out-of-bounds read when processing ICMP DAO input
Priority MEDIUM 46
Contiki-NG is an operating system for internet of things devices.
TI-2019-06001 CVE-2019-8359 · GHSA-pcw5-87gf-vhfh
An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0.
Priority MEDIUM 46
An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0.
TI-2026-05134 CVE-2026-5855 · GHSA-ch5q-j8ff-mq34
Contiki-NG LwM2M TLV Parser Out-of-Bounds Read via Unchecked Buffer Length in lwm2m_tlv_read
Priority MEDIUM 45
Contiki-NG's LwM2M TLV parser lwm2m_tlv_read() in os/services/lwm2m/lwm2m-tlv.c ignores its caller-supplied buffer length argument and reads up to six bytes from the input buffer with no bounds check.
TI-2020-11747 CVE-2020-14936 · GHSA-jrf8-p6cc-fr4f
Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent.
Priority MEDIUM 45
Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent.
TI-2020-11745 CVE-2020-14934 · GHSA-v2cg-frq6-hw49
Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent.
Priority MEDIUM 45
Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent.
TI-2023-27822 CVE-2023-50927
Insufficient boundary checks for DIO and DAO messages in RPL-Lite in Contiki-NG
Priority MEDIUM 44
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices.
TI-2023-13462 CVE-2023-29001
Uncontrolled recursion due to insufficient validation of the IPv6 source routing header in Contiki-NG
Priority MEDIUM 44
Contiki-NG is an open-source, cross-platform operating system for IoT devices.
Priority MEDIUM 44
Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices.
TI-2021-18648 CVE-2021-42141 · GHSA-mfm9-9c5w-7f5g
An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30.
Priority MEDIUM 44
An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30.
Priority MEDIUM 44
Contiki-NG is an open-source, cross-platform operating system for internet of things devices.
Priority MEDIUM 44
Contiki-NG is an open-source, cross-platform operating system for internet of things devices.
Priority MEDIUM 44
Contiki-NG is an open-source, cross-platform operating system for internet of things devices.
Priority MEDIUM 43
Contiki-NG is an open-source, cross-platform operating system for IoT devices.