Vulnerabilities > Contiki NG

DATE CVE VULNERABILITY TITLE RISK
2023-06-14 CVE-2023-34101 Out-of-bounds Read vulnerability in Contiki-Ng
Contiki-NG is an operating system for internet of things devices.
network
low complexity
contiki-ng CWE-125
critical
9.1
2023-06-09 CVE-2023-34100 Out-of-bounds Read vulnerability in Contiki-Ng
Contiki-NG is an open-source, cross-platform operating system for IoT devices.
network
low complexity
contiki-ng CWE-125
6.5
2023-05-08 CVE-2023-31129 NULL Pointer Dereference vulnerability in Contiki-Ng
The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message handling code for IPv6 router solicitiations.
network
low complexity
contiki-ng CWE-476
critical
9.8
2023-04-26 CVE-2023-30546 Off-by-one Error vulnerability in Contiki-Ng
Contiki-NG is an operating system for Internet of Things devices.
network
low complexity
contiki-ng CWE-193
7.5
2023-03-17 CVE-2023-28116 Out-of-bounds Write vulnerability in Contiki-Ng
Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices.
network
low complexity
contiki-ng CWE-787
critical
9.8
2023-01-26 CVE-2023-23609 Out-of-bounds Write vulnerability in Contiki-Ng
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices.
low complexity
contiki-ng CWE-787
7.4
2022-12-16 CVE-2022-41972 NULL Pointer Dereference vulnerability in Contiki-Ng
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices.
low complexity
contiki-ng CWE-476
6.5
2022-11-11 CVE-2022-41873 Out-of-bounds Read vulnerability in Contiki-Ng
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices.
low complexity
contiki-ng CWE-125
5.4
2021-12-07 CVE-2020-12140 Classic Buffer Overflow vulnerability in Contiki-Ng
A buffer overflow in os/net/mac/ble/ble-l2cap.c in the BLE stack in Contiki-NG 4.4 and earlier allows an attacker to execute arbitrary code via malicious L2CAP frames.
low complexity
contiki-ng CWE-120
8.3
2021-10-19 CVE-2020-12141 Out-of-bounds Read vulnerability in Contiki-Ng
An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service and potentially disclose information via crafted SNMP packets to snmp_ber_decode_string_len_buffer in os/net/app-layer/snmp/snmp-ber.c.
network
low complexity
contiki-ng CWE-125
6.4