CVE-2023-35862

MediumCVSS 6.5

Published: 19/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.64%

46th percentile - higher than 46% of all known CVEs

Summary

Version 4.3.1 of the libcoap library contains a buffer over-read vulnerability in the coap_parse_oscore_conf_mem function in coap_oscore.c.

Risk Assessment

An attacker may exploit this vulnerability to read data outside the allocated memory space, potentially leading to the disclosure of sensitive information.

Recommendation

It is recommended to update the libcoap library to the latest version to mitigate this vulnerability.

Original NVD description (English source)

libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c.