Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Golioth Firmware SDK 0.22.0 Clear all filters
TI-2026-19122 CVE-2026-23749 · GHSA-2qjx-h626-j6v4

Golioth Firmware SDK < 0.22.0 Blockwise Transfer Path Out-of-Bounds Read

Priority MEDIUM 44

Golioth Firmware SDK version 0.19.1 prior to 0.22.0, fixed in commit 0e788217, contain an out-of-bounds read due to improper null termination of a blockwise transfer path.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00184 Published 2026-02-26 Fixed in 0.22.0 CWE-170
TI-2026-19121 CVE-2026-23748 · GHSA-h52p-5g3g-rxjm

Golioth Firmware SDK < 0.22.0 LightDB State Out-of-Bounds Read

Priority MEDIUM 61

Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit d7f55b38, contain an out-of-bounds read in LightDB State string parsing.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00308 Published 2026-02-26 Fixed in 0.22.0 CWE-191