Vulnerabilities

TI-2026-05136 CVE-2026-5857 · GHSA-x5g5-4jq8-vj28

Contiki-NG MQTT Client Out-of-Bounds Write in PUBLISH Topic Parser via Persistent State Between TCP Segments

MEDIUM 47

Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets topic_len_received=1 before checking topic_len against the 64-byte limit, so an over-length topic returns early but leaves the flag set.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00919 Published 2026-08-06 Fixed in a34a2db CWE-787

TI-2026-05135 CVE-2026-5856 · GHSA-8m55-g479-xj8c

Contiki-NG DNS/mDNS Resolver Out-of-Bounds Read via Unchecked skip_name Traversal Before Transaction-ID Validation

LOW 31

Contiki-NG's DNS/mDNS resolver skip_name() in os/services/resolv/resolv.c walks DNS wire-format name labels with no packet-boundary check, and the caller in newdata() invokes it in a loop iterating nquestions times from…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00291 Published 2026-08-06 Fixed in 04a3f0a CWE-125

TI-2026-05134 CVE-2026-5855 · GHSA-ch5q-j8ff-mq34

Contiki-NG LwM2M TLV Parser Out-of-Bounds Read via Unchecked Buffer Length in lwm2m_tlv_read

MEDIUM 45

Contiki-NG's LwM2M TLV parser lwm2m_tlv_read() in os/services/lwm2m/lwm2m-tlv.c ignores its caller-supplied buffer length argument and reads up to six bytes from the input buffer with no bounds check.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00718 Published 2026-08-06 Fixed in f1673b5 CWE-125

TI-2023-13462 CVE-2023-29001

Uncontrolled recursion due to insufficient validation of the IPv6 source routing header in Contiki-NG

MEDIUM 44

Contiki-NG is an open-source, cross-platform operating system for IoT devices.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00561 Published 2024-11-27 No fix listed CWE-674

TI-2024-27477 CVE-2024-41125

Out-of-bounds read in SNMP when decoding a string in Contiki-NG

MEDIUM 43

Contiki-NG is an open-source, cross-platform operating system for IoT devices.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00294 Published 2024-11-27 No fix listed CWE-125

TI-2024-27478 CVE-2024-41126

Out-of-bounds read when decoding SNMP messages in Contiki-NG

MEDIUM 43

Contiki-NG is an open-source, cross-platform operating system for IoT devices.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00294 Published 2024-11-27 No fix listed CWE-125

TI-2024-31548 CVE-2024-47181

Unaligned memory access in RPL option processing in Contiki-NG

MEDIUM 40

Contiki-NG is an open-source, cross-platform operating system for IoT devices.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00581 Published 2024-11-27 No fix listed CWE-704

TI-2023-27821 CVE-2023-50926

Unvalidated DIO prefix info length in RPL-Lite in Contiki-NG

LOW 39

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0053 Published 2024-02-14 No fix listed CWE-125

TI-2023-27822 CVE-2023-50927

Insufficient boundary checks for DIO and DAO messages in RPL-Lite in Contiki-NG

MEDIUM 44

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00508 Published 2024-02-14 Fixed in 4.9 CWE-125

TI-2023-26093 CVE-2023-48229

Out-of-bounds write in the radio driver for Contiki-NG nRF platforms

LOW 33

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices.

CVSS 3.1HIGH 7.6 Adjacent network No auth No interaction EPSS 0.00387 Published 2024-02-14 No fix listed CWE-787

TI-2021-18654 CVE-2021-42147 · GHSA-9vpc-ch84-fc8h

Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS…

MEDIUM 47

Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cause a denial of service via crafted data packet.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00836 Published 2024-01-24 No fix listed CWE-125

TI-2021-18653 CVE-2021-42146 · GHSA-wmpm-9r6p-rpww

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97.

MEDIUM 40

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00662 Published 2024-01-24 No fix listed CWE-303

TI-2021-18652 CVE-2021-42145 · GHSA-vwwf-cxx3-3hpv

An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS…

LOW 39

An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to cause a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00429 Published 2024-01-24 No fix listed CWE-755

TI-2021-18651 CVE-2021-42144 · GHSA-7r27-33fg-9cpx

Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97…

MEDIUM 49

Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input to dtls_ccm_decrypt_message().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00658 Published 2024-01-24 No fix listed CWE-125

TI-2021-18650 CVE-2021-42143 · GHSA-23p4-xxgc-xqvf

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97.

MEDIUM 41

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00812 Published 2024-01-24 No fix listed CWE-835

TI-2021-18649 CVE-2021-42142 · GHSA-q37p-g696-qhwm

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97.

MEDIUM 51

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00989 Published 2024-01-23 No fix listed CWE-770

TI-2021-18648 CVE-2021-42141 · GHSA-mfm9-9c5w-7f5g

An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30.

MEDIUM 44

An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01181 Published 2024-01-22 No fix listed CWE-755

TI-2020-16751 CVE-2020-27634 · GHSA-pw9j-jvfg-9ppw

In Contiki 4.5, TCP ISNs are improperly random.

MEDIUM 51

In Contiki 4.5, TCP ISNs are improperly random.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01716 Published 2023-10-10 No fix listed CWE-330

TI-2023-19068 CVE-2023-37459

Out-of-bounds read when processing a received IPv6 packet

LOW 30

Contiki-NG is an operating system for internet-of-things devices.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00462 Published 2023-09-15 No fix listed CWE-125

TI-2023-18911 CVE-2023-37281

Out-of-bounds read during IPHC address decompression

LOW 30

Contiki-NG is an operating system for internet-of-things devices.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00462 Published 2023-09-15 No fix listed CWE-125

TI-2023-16947 CVE-2023-34101

Contiki-NG vulnerable to out-of-bounds read when processing ICMP DAO input

MEDIUM 46

Contiki-NG is an operating system for internet of things devices.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00505 Published 2023-06-14 No fix listed CWE-125

TI-2023-16946 CVE-2023-34100

Out-of-Bounds Read in contiki-ng

LOW 38

Contiki-NG is an open-source, cross-platform operating system for IoT devices.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00437 Published 2023-06-09 No fix listed CWE-125

TI-2023-14839 CVE-2023-31129

Contiki-NG missing NULL pointer check in IPv6 neighbor discovery

MEDIUM 49

The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message handling code for IPv6 router solicitiations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00644 Published 2023-05-08 No fix listed CWE-476

TI-2023-14381 CVE-2023-30546

Contiki-NG has off-by-one error in Antelope DBMS

MEDIUM 50

Contiki-NG is an operating system for Internet of Things devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00638 Published 2023-04-26 No fix listed CWE-125

TI-2023-12695 CVE-2023-28116

Buffer overflow in L2CAP due to misconfigured MTU

MEDIUM 44

Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00687 Published 2023-03-17 No fix listed CWE-120

Vulnerabilities

Filters