VULNERABILITY INTELLIGENCE

CVE-2025-59391

CVSS score6.5 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2025-12-08
Last modified2026-10-19
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Description

A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches. An out-of-bounds read may occur when parsing certain configuration values, allowing an attacker to infer or read memory beyond string boundaries in the .rodata section. This could potentially lead to information disclosure or denial of service.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-125

Primary references