Known Vulnerabilities for Contiki by Contiki-os
Listed below are 10 of the newest known vulnerabilities associated with "Contiki" by "Contiki-os".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-5857 json | Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets topic_len_received=1 before checking topic... | Not Provided | 2026-08-06 | 2026-08-13 |
| CVE-2026-5856 json | Contiki-NG's DNS/mDNS resolver skip_name() in os/services/resolv/resolv.c walks DNS wire-format name labels with no packet-bo... | Not Provided | 2026-08-06 | 2026-08-07 |
| CVE-2026-5855 json | Contiki-NG's LwM2M TLV parser lwm2m_tlv_read() in os/services/lwm2m/lwm2m-tlv.c ignores its caller-supplied buffer length arg... | Not Provided | 2026-08-06 | 2026-08-07 |
| CVE-2021-40523 json | In Contiki 3.0, Telnet option negotiation is mishandled. During negotiation between a server and a client, the server may fai... | 7.5 - HIGH | 2021-09-05 | 2021-09-10 |
| CVE-2021-38387 json | In Contiki 3.0, a Telnet server that silently quits (before disconnection with clients) leads to connected clients entering a... | 7.5 - HIGH | 2021-08-10 | 2022-05-03 |
| CVE-2021-38386 json | In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the ls c... | 7.5 - HIGH | 2021-08-10 | 2021-08-17 |
| CVE-2021-38311 json | In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are al... | 7.5 - HIGH | 2021-08-09 | 2021-08-17 |
| CVE-2021-28362 json | An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header opti... | 7.5 - HIGH | 2021-03-24 | 2021-03-26 |
| CVE-2020-24336 json | An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in... | 9.8 - CRITICAL | 2020-12-11 | 2020-12-15 |
| CVE-2020-24335 json | An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, allow... | 7.5 - HIGH | 2021-02-02 | 2021-02-04 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Contiki-os | Contiki | 3.0 | |||
| Operating System | Contiki-os | Contiki | 2.7 | |||
| Operating System | Contiki-os | Contiki | 2.6 | |||
| Operating System | Contiki-os | Contiki | 2.5 | |||
| Operating System | Contiki-os | Contiki | 2.4 | |||
| Operating System | Contiki-os | Contiki | 2.3 | |||
| Operating System | Contiki-os | Contiki | 2.2.3 | |||
| Operating System | Contiki-os | Contiki | 2.2.2 | |||
| Operating System | Contiki-os | Contiki | 2.2.1 | |||
| Operating System | Contiki-os | Contiki | 2.2 | |||
| Operating System | Contiki-os | Contiki | 2.1 | |||
| Operating System | Contiki-os | Contiki | 2.0 | |||
| Operating System | Contiki-os | Contiki | - |