CVE-2026-15340
CriticalCVSS 9.8Summary
The lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.
Risk Assessment
A buffer overflow may allow an attacker to execute arbitrary code or cause a crash in applications using lwIP.
Recommendation
Update lwIP to a version containing the fix or restrict input handling in the SMTP client. Monitor SMTP traffic for unusual data.
Other vulnerabilities in lwIP
See all- CVE-2026-87121Critical
lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device.
- CVE-2026-8836Critical
A vulnerability was found in lwIP up to 2.2.1 in the snmp_parse_inbound_frame function of src/apps/snmp/snmp_msg.c in the SNMPv3 USM handler. Manipulating the msgAuthenticationParameters argument results in a stack-based buffer overflow. The attack can be initiated remotely. A patch named 0c957ec03054eb6c8205e9c9d1d05d90ada3898c is available.
- CVE-2026-91018High
lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system.
Original NVD description (English source)
lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS