CVE-2026-26457

Unknown

Published: 27/08/2026(UTC)Translated: 27/08/2026(UTC)NVD NIST

Summary

ccoap (commit 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5) contains a null pointer dereference vulnerability in the coap_dump_msg() function when processing COAP messages containing options with zero length.

Risk Assessment

An attacker can cause a denial of service (DoS) by sending COAP messages with zero-length options, leading to a segmentation fault.

Recommendation

Update ccoap to a patched version or protect the system against malformed COAP messages.

Original NVD description (English source)

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coap_dump_msg() function when processing COAP messages containing options with zero length.