libcoap records

18 published records for vendor libcoap.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 88.9%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

18 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-29013No exploit	libcoap Out-of-Bounds Read in OSCORE CBOR Unwrap Handlinglibcoap · libcoap · CWE-125 Pre-auth Memory safety	High8.8	—	0.5%	Apr 17, 2026
32Monitor	CVE-2025-34468No exploit	libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCElibcoap · libcoap · CWE-121 pre-auth RCE Memory safety	High8.2	—	0.7%	Dec 31, 2025
31Monitor	CVE-2024-0962No exploit	obgm libcoap Configuration File coap_oscore.c get_split_entry stack-based overflowlibcoap · libcoap · CWE-121 Memory safety	High7.8	—	0.8%	Jan 27, 2024
30Monitor	CVE-2024-31031No exploit	An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integelibcoap · libcoap · CWE-190 Pre-auth Memory safety Denial of service	High7.5	—	0.9%	Apr 17, 2024
30Monitor	CVE-2023-30362No exploit	Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to oblibcoap · libcoap · CWE-125 Pre-auth Memory safety	High7.5	—	0.8%	Jun 23, 2023
30Monitor	CVE-2023-51847No exploit	An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoap_context_t function in the src/coap_CWE-400 Pre-auth Denial of service	High7.5	—	0.6%	Jun 6, 2024
30Monitor	CVE-2024-46304No exploit	A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a denial of service via the coap_handle_requestCWE-120 Pre-auth Memory safety Denial of service	High7.5	—	0.6%	Oct 9, 2024
30Monitor	CVE-2025-65493No exploit	NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLSlibcoap · libcoap · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Nov 24, 2025
30Monitor	CVE-2025-65495No exploit	Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of libcoap · libcoap · CWE-195 Pre-auth Denial of service	High7.5	—	0.2%	Nov 24, 2025
30Monitor	CVE-2025-65494No exploit	NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial libcoap · libcoap · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	0.2%	Nov 24, 2025
26Monitor	CVE-2023-35862No exploit	libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c.libcoap · libcoap · CWE-125 Pre-auth Memory safety Denial of service	Medium6.5	—	0.8%	Jun 19, 2023
26Monitor	CVE-2025-59391No exploit	A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches.libcoap · libcoap · CWE-125 Pre-auth Memory safety	Medium6.5	—	0.3%	Dec 8, 2025
17Monitor	CVE-2025-65497No exploit	NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denialibcoap · libcoap · CWE-476 Pre-auth Memory safety Denial of service	Medium4.3	—	0.3%	Nov 24, 2025
17Monitor	CVE-2025-65498No exploit	NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denialibcoap · libcoap · CWE-476 Pre-auth Memory safety Denial of service	Medium4.3	—	0.3%	Nov 24, 2025
17Monitor	CVE-2025-65496No exploit	NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denialibcoap · libcoap · CWE-476 Pre-auth Memory safety Denial of service	Medium4.3	—	0.3%	Nov 24, 2025
17Monitor	CVE-2025-65500No exploit	NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denialibcoap · libcoap · CWE-476 Pre-auth Memory safety Denial of service	Medium4.3	—	0.3%	Nov 24, 2025
17Monitor	CVE-2025-65501No exploit	Null pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a DTLS libcoap · libcoap · CWE-476 Pre-auth Memory safety Denial of service	Medium4.3	—	0.3%	Nov 24, 2025
17Monitor	CVE-2025-65499No exploit	Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of servicelibcoap · libcoap · CWE-129 Pre-auth Denial of service	Medium4.3	—	0.3%	Nov 24, 2025

CVE-2026-29013
35Monitor
libcoap Out-of-Bounds Read in OSCORE CBOR Unwrap Handling
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Memory safety
libcoap · libcoapApr 17, 2026
CVE-2025-34468
32Monitor
libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE
HighCVSS 8.2No exploitEPSS 1%
- pre-auth RCE
- Memory safety
libcoap · libcoapDec 31, 2025
CVE-2024-0962
31Monitor
obgm libcoap Configuration File coap_oscore.c get_split_entry stack-based overflow
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
libcoap · libcoapJan 27, 2024
CVE-2024-31031
30Monitor
An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned intege
HighCVSS 7.5No exploitEPSS 1%
libcoap · libcoapApr 17, 2024
CVE-2023-30362
30Monitor
Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to ob
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
libcoap · libcoapJun 23, 2023
CVE-2023-51847
30Monitor
An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoap_context_t function in the src/coap_
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
Jun 6, 2024
CVE-2024-46304
30Monitor
A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a denial of service via the coap_handle_request
HighCVSS 7.5No exploitEPSS 1%
Oct 9, 2024
CVE-2025-65493
30Monitor
NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS
HighCVSS 7.5No exploitEPSS 0%
libcoap · libcoapNov 24, 2025
CVE-2025-65495
30Monitor
Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
libcoap · libcoapNov 24, 2025
CVE-2025-65494
30Monitor
NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial
HighCVSS 7.5No exploitEPSS 0%
libcoap · libcoapNov 24, 2025
CVE-2023-35862
26Monitor
libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c.
MediumCVSS 6.5No exploitEPSS 1%
libcoap · libcoapJun 19, 2023
CVE-2025-59391
26Monitor
A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches.
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Memory safety
libcoap · libcoapDec 8, 2025
CVE-2025-65497
17Monitor
NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denia
MediumCVSS 4.3No exploitEPSS 0%
libcoap · libcoapNov 24, 2025
CVE-2025-65498
17Monitor
NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denia
MediumCVSS 4.3No exploitEPSS 0%
libcoap · libcoapNov 24, 2025
CVE-2025-65496
17Monitor
NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denia
MediumCVSS 4.3No exploitEPSS 0%
libcoap · libcoapNov 24, 2025
CVE-2025-65500
17Monitor
NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denia
MediumCVSS 4.3No exploitEPSS 0%
libcoap · libcoapNov 24, 2025
CVE-2025-65501
17Monitor
Null pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a DTLS
MediumCVSS 4.3No exploitEPSS 0%
libcoap · libcoapNov 24, 2025
CVE-2025-65499
17Monitor
Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- Denial of service
libcoap · libcoapNov 24, 2025