Lwip Project

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 5
    Known Exploited: 0
    0
    Critical Level Threats
    2
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-119053

    lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp_pbuf_stream_writeto()

    Last Modified: Oct 29, 2026
    Published: Oct 29, 2026

    CVE-2026-112062

    lwIP through 2.2.1 Stack Out-of-Bounds Write via mDNS Search Response Handler

    Last Modified: Oct 19, 2026
    Published: Oct 18, 2026

    CVE-2020-22284

    A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software Foundation lwIP git head version and version 2.1.2 allows attackers to access sensitive information via a crafted 6LoWPAN packet.

    Last Modified: Nov 21, 2024
    Published: Jul 22, 2021

    CVE-2020-22283

    A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif() function of Free Software Foundation lwIP version git head allows attackers to access sensitive information via a crafted ICMPv6 packet.

    Last Modified: Nov 21, 2024
    Published: Jul 22, 2021

    CVE-2014-4883

    resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets.

    Last Modified: Apr 12, 2025
    Published: Nov 28, 2014
    Items Per Page
    Lwip_Project Vulnerabilities & Security CVEs | CVE-DB