lwip-tcpip/lwip

lwip-tcpip/lwip

GitHubGitHub
GitHubgithub.com
savannah.nongnu.orgsavannah.nongnu.org
Releases51
Frequency5 months 1 week
Last Release
Stars1.65K
lwIP mirror from http://git.savannah.gnu.org/cgit/lwip.git
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-8836↗
9.8 CRITICAL10 HIGH

A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer overflow. The attack may be initiated remotely. The patch is named 0c957ec03054eb6c8205e9c9d1d05d90ada3898c. It is suggested to install a patch to address this issue.