Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: lwIP Clear all filters
TI-2026-82411 CVE-2026-119053 · GHSA-mm46-vrwc-xmpq

Out-of-bounds read in lwIP SNMP agent leaks adjacent memory

Priority LOW 37

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmp_pbuf_stream_writeto() that bounds copies by pbuf->len instead of remaining bytes.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00482 Published 2026-10-29 No fix listed CWE-125
TI-2026-76190 CVE-2026-112062 · GHSA-7m6v-7jf3-5x4h

Stack out-of-bounds write in lwIP mDNS response handler

Priority MEDIUM 60

lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00356 Published 2026-10-18 No fix listed CWE-121
TI-2026-61856 CVE-2026-91018 · GHSA-rmx4-24pf-8x6h

Double Free in lwIP (lightweight IP)

Priority MEDIUM 40

lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00397 Published 2026-09-22 No fix listed CWE-415
TI-2026-59484 CVE-2026-87121 · GHSA-h8q6-7rjx-3m2r

Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application

Priority MEDIUM 49

lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00775 Published 2026-09-22 No fix listed CWE-787