Vendors / Golioth Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Golioth records in CISA KEV No Golioth vulnerabilities are listed in CISA KEV.
Priority HIGH 67
Golioth Pouch version 0.1.0, prior to commit 1b2219a1, contains a heap-based buffer overflow in BLE GATT server certificate handling.
CVSS 4.0 HIGH 7.2· Adjacent network · No auth · No interaction · EPSS 0.00166 · Published 2026-02-26 · Fixed CWE-122
Priority MEDIUM 61
Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit d7f55b38, contain an out-of-bounds read in LightDB State string parsing.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00308 · Published 2026-02-26 · Fixed in 0.22.0 CWE-191
Priority MEDIUM 61
Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in Payload Utils.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.0034 · Published 2026-02-26 · Fixed in 0.22.0 CWE-121
Priority MEDIUM 44
Golioth Firmware SDK version 0.19.1 prior to 0.22.0, fixed in commit 0e788217, contain an out-of-bounds read due to improper null termination of a blockwise transfer path.
CVSS 4.0 LOW 2.1· Local · No auth · No interaction · EPSS 0.00184 · Published 2026-02-26 · Fixed in 0.22.0 CWE-170
Open these records in search → All records by CVSS severity
0 1 2 1 0
THREATIST.IORead the docs