Priority HIGH 76
LoRaMac-node is a reference implementation and documentation of a LoRa network node.
Semtech
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Semtech records in CISA KEVNo Semtech vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2020-08942 CVE-2020-11068
Potential Buffer Overflow in LoRaMac-node
Priority MEDIUM 40
In LoRaMac-node before 4.4.4, a reception buffer overflow can happen due to the received buffer size not being checked.
TI-2025-13554 CVE-2025-14859 · GHSA-v47h-jj44-7gh5
Semtech LR11xx Secure Boot Bypass
Priority LOW 32
The Semtech LR11xx LoRa transceivers implement secure boot functionality using digital signatures to authenticate firmware.
TI-2025-13552 CVE-2025-14857 · GHSA-xjjj-2993-4g39
Semtech LR11xx Memory Write Access Control Bypass
Priority LOW 26
An improper access control vulnerability exists in Semtech LoRa LR11xxx transceivers running early versions of firmware where the memory write command accessible via the physical SPI interface fails to enforce write prot…
TI-2026-71207 CVE-2026-6232 · GHSA-p9mw-jx6h-2wjg
Out-of-bounds write in Semtech LR11xx transceiver firmware
Priority LOW 25
An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can cause the firmware to write up to 254 ar…
Priority LOW 25
In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption.
TI-2025-13553 CVE-2025-14858 · GHSA-pq38-4mfg-vpxj
Semtech LR11xx Encrypted Firmware Disclosure
Priority LOW 24
The Semtech LR11xx LoRa transceivers running early versions of firmware contains an information disclosure vulnerability in its firmware validation functionality.