<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: contiki-ng</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-47181: Contiki-NG is an open-source, cross-platform operating system for IoT devices</title><link>https://patchthecve.com/cve/CVE-2024-47181.html</link><guid>https://patchthecve.com/cve/CVE-2024-47181.html</guid><pubDate>Wed, 17 Jun 2026 07:56:41 +0000</pubDate><description>HIGH 7.5: Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementations of the Contiki-NG operating system. The problem can occur when either one of these RPL implementations is enabled and connected to an RPL instance</description></item><item><title>CVE-2024-41126: Contiki-NG is an open-source, cross-platform operating system for IoT devices</title><link>https://patchthecve.com/cve/CVE-2024-41126.html</link><guid>https://patchthecve.com/cve/CVE-2024-41126.html</guid><pubDate>Wed, 17 Jun 2026 07:47:19 +0000</pubDate><description>HIGH 8.3: Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The vulner</description></item><item><title>CVE-2024-41125: Contiki-NG is an open-source, cross-platform operating system for IoT devices</title><link>https://patchthecve.com/cve/CVE-2024-41125.html</link><guid>https://patchthecve.com/cve/CVE-2024-41125.html</guid><pubDate>Wed, 17 Jun 2026 07:47:19 +0000</pubDate><description>HIGH 8.3: Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The vulner</description></item><item><title>CVE-2023-29001: Contiki-NG is an open-source, cross-platform operating system for IoT devices</title><link>https://patchthecve.com/cve/CVE-2023-29001.html</link><guid>https://patchthecve.com/cve/CVE-2023-29001.html</guid><pubDate>Wed, 17 Jun 2026 05:49:09 +0000</pubDate><description>HIGH 7.5: Contiki-NG is an open-source, cross-platform operating system for IoT devices. The Contiki-NG operating system processes source routing headers (SRH) in its two alternative RPL protocol implementations. The IPv6 implementation uses the results of this processing to determine whether an incoming pack</description></item><item><title>CVE-2023-50927: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices</title><link>https://patchthecve.com/cve/CVE-2023-50927.html</link><guid>https://patchthecve.com/cve/CVE-2023-50927.html</guid><pubDate>Wed, 17 Jun 2026 06:40:15 +0000</pubDate><description>HIGH 8.6: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An attacker can trigger out-of-bounds reads in the RPL-Lite implementation of the RPL protocol in the Contiki-NG operating system. This vulnerability is caused by insufficient control of the lengths for DI</description></item><item><title>CVE-2023-50926: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices</title><link>https://patchthecve.com/cve/CVE-2023-50926.html</link><guid>https://patchthecve.com/cve/CVE-2023-50926.html</guid><pubDate>Wed, 17 Jun 2026 06:40:14 +0000</pubDate><description>HIGH 7.5: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be caused by an incoming DIO message when using the RPL-Lite implementation in the Contiki-NG operating system. More specifically, the prefix information of the DIO message contai</description></item><item><title>CVE-2023-48229: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices</title><link>https://patchthecve.com/cve/CVE-2023-48229.html</link><guid>https://patchthecve.com/cve/CVE-2023-48229.html</guid><pubDate>Wed, 17 Jun 2026 06:33:47 +0000</pubDate><description>HIGH 7.0: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds write exists in the driver for IEEE 802.15.4 radios on nRF platforms in the Contiki-NG operating system. The problem is triggered when parsing radio frames in the `read_frame` function in </description></item></channel></rss>