CVE-2024-40494

Buffer Overflow in coap_msg.c in FreeCoAP allows remote attackers to execute arbitrary code or cause a denial of service (stack buffer overflow) via a crafted packet.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2024-10-22

Last modified

2024-10-23

Weaknesses

CWE-120

Affected products

• Freecoap (Keith-cullen)
• Freecoap (Keithcullen)

References

• https://gist.github.com/dqp10515/e9d7d663cb89187bfe7b39bb3aeb0113
• https://github.com/dqp10515/security/tree/main/FreeCoAP_bug