Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CoAP PDU Parsing Error in CoAP
published 5 months ago
Summary
CoAP is vulnerable to a memory error that can cause the application to crash. This happens when the CoAP server receives a specially crafted message, leading to unexpected behavior. Update CoAP to the latest version to fix this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| OSS-Fuzz | – | libcoap | All versions |
Original advisory text
Heap-buffer-overflow in coap_pdu_parse_header
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513783540
```
Crash type: Heap-buffer-overflow READ 1
Crash state:
coap_pdu_parse_header
coap_pdu_parse2
coap_pdu_parse
```
```
Crash type: Heap-buffer-overflow READ 1
Crash state:
coap_pdu_parse_header
coap_pdu_parse2
coap_pdu_parse
```
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513783540 Third Party Advisory
Timeline
Published18 May 2026
Updated21 May 2026
First seen21 May 2026
Sources
OSV-2026-762 · OSV
Track software like this
Free during beta