VULNERABILITY INTELLIGENCE

CVE-2020-14937

CVSS score9.1 CRITICAL
EPSS probability1.48%
CISA KEVNot currently listed
Published2020-08-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Description

Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. The length of provided input/output buffers is insufficiently verified during the encoding and decoding of data. This may lead to out-of-bounds buffer read or write access in BER decoding and encoding functions.

Weakness classification

  • nvd@nist.gov: CWE-125

Primary references