CVE-2025-34468

<= 4.3.5

libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution w

9.8CRITICAL

CVE-2025-59391

< 4.3.5a

A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches. An out-

6.5MEDIUM

CVE-2025-65501

all versions

Null pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service v

4.3MEDIUM

CVE-2025-65500

all versions

NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cau

4.3MEDIUM

CVE-2025-65499

all versions

Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial

4.3MEDIUM

CVE-2025-65498

all versions

NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cau

4.3MEDIUM

CVE-2025-65497

all versions

NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cau

4.3MEDIUM

CVE-2025-65496

all versions

NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cau

4.3MEDIUM

CVE-2025-65495

all versions

Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a

7.5HIGH

CVE-2025-65494

all versions

NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause

7.5HIGH

CVE-2025-65493

all versions

NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a cr

7.5HIGH

CVE-2024-31031

all versions

An issue in coap_pdu.c in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsig

7.5HIGH

CVE-2024-0962

all versions

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_e

6.3MEDIUM

CVE-2023-30362

< 4.3.1-120-ge242200

Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attac

7.5HIGH

CVE-2023-35862

all versions

libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c.

6.5MEDIUM