CVE-2018-16667

An issue was discovered in Contiki-NG through 4.1. There is a buffer over-read in lookup in os/storage/antelope/lvm.c while parsing AQL (lvm_register_variable, lvm_set_variable_value, create_intersection, create_union).

Score

CVSS 3.0 7.0 High

Status

Modified - cve@mitre.org

Published

2018-09-07

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Contiki-ng. (Contiki-ng)

References

• https://github.com/contiki-ng/contiki-ng/issues/597