https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-47181.htmlhttps://patchthecve.com/cve/CVE-2024-47181.htmlWed, 17 Jun 2026 07:56:41 +0000HIGH 7.5: Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementations of the Contiki-NG operating system. The problem can occur when either one of these RPL implementations is enabled and connected to an RPL instancehttps://patchthecve.com/cve/CVE-2024-41126.htmlhttps://patchthecve.com/cve/CVE-2024-41126.htmlWed, 17 Jun 2026 07:47:19 +0000HIGH 8.3: Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The vulnerhttps://patchthecve.com/cve/CVE-2024-41125.htmlhttps://patchthecve.com/cve/CVE-2024-41125.htmlWed, 17 Jun 2026 07:47:19 +0000HIGH 8.3: Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The vulnerhttps://patchthecve.com/cve/CVE-2023-29001.htmlhttps://patchthecve.com/cve/CVE-2023-29001.htmlWed, 17 Jun 2026 05:49:09 +0000HIGH 7.5: Contiki-NG is an open-source, cross-platform operating system for IoT devices. The Contiki-NG operating system processes source routing headers (SRH) in its two alternative RPL protocol implementations. The IPv6 implementation uses the results of this processing to determine whether an incoming packhttps://patchthecve.com/cve/CVE-2023-50927.htmlhttps://patchthecve.com/cve/CVE-2023-50927.htmlWed, 17 Jun 2026 06:40:15 +0000HIGH 8.6: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An attacker can trigger out-of-bounds reads in the RPL-Lite implementation of the RPL protocol in the Contiki-NG operating system. This vulnerability is caused by insufficient control of the lengths for DIhttps://patchthecve.com/cve/CVE-2023-50926.htmlhttps://patchthecve.com/cve/CVE-2023-50926.htmlWed, 17 Jun 2026 06:40:14 +0000HIGH 7.5: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be caused by an incoming DIO message when using the RPL-Lite implementation in the Contiki-NG operating system. More specifically, the prefix information of the DIO message contaihttps://patchthecve.com/cve/CVE-2023-48229.htmlhttps://patchthecve.com/cve/CVE-2023-48229.htmlWed, 17 Jun 2026 06:33:47 +0000HIGH 7.0: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds write exists in the driver for IEEE 802.15.4 radios on nRF platforms in the Contiki-NG operating system. The problem is triggered when parsing radio frames in the `read_frame` function in https://patchthecve.com/cve/CVE-2021-42147.htmlhttps://patchthecve.com/cve/CVE-2021-42147.htmlWed, 17 Jun 2026 04:09:26 +0000CRITICAL 9.1: Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cause a denial of service via crafted data packet.https://patchthecve.com/cve/CVE-2021-42146.htmlhttps://patchthecve.com/cve/CVE-2021-42146.htmlWed, 17 Jun 2026 04:09:25 +0000HIGH 7.5: An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number within two times the TCP maximum segment lifetime, which is prohibited in RFC6347. This vulnerability allows remote attackers to obtain sensitive applicatihttps://patchthecve.com/cve/CVE-2021-42145.htmlhttps://patchthecve.com/cve/CVE-2021-42145.htmlWed, 17 Jun 2026 04:09:25 +0000HIGH 7.5: An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to cause a denial of service.https://patchthecve.com/cve/CVE-2021-42144.htmlhttps://patchthecve.com/cve/CVE-2021-42144.htmlWed, 17 Jun 2026 04:09:25 +0000CRITICAL 9.8: Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input to dtls_ccm_decrypt_message().https://patchthecve.com/cve/CVE-2021-42143.htmlhttps://patchthecve.com/cve/CVE-2021-42143.htmlWed, 17 Jun 2026 04:09:25 +0000CRITICAL 9.1: An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. An infinite loop bug exists during the handling of a ClientHello handshake message. This bug allows remote attackers to cause a denial of service by sending a malformed ClientHello handshake message with an odd length of chttps://patchthecve.com/cve/CVE-2021-42142.htmlhttps://patchthecve.com/cve/CVE-2021-42142.htmlWed, 17 Jun 2026 04:09:25 +0000CRITICAL 9.8: An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a large epoch number. This vulnerability allows remote attackers to cause a denial of service and false-positive packet drops.https://patchthecve.com/cve/CVE-2021-42141.htmlhttps://patchthecve.com/cve/CVE-2021-42141.htmlWed, 17 Jun 2026 04:09:25 +0000CRITICAL 9.8: An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in the packets Client_Hello, Client_key_exchange, and Change_cipher_spec, which may cause denial of service.