CVE-2026-119053

    Dashboard / Vulnerabilities / CVE-2026-119053

    CVE-2026-119053

    Published: 29 Oct 2026Last Modified: 31 Oct 2026

    Summary: lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp_pbuf_stream_writeto()

    Details: lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmp_pbuf_stream_writeto() that bounds copies by pbuf->len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent receive-buffer or pool memory echoed in responses.

    References: https://savannah.nongnu.org/projects/lwip/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/119xxx/CVE-2026-119053.json, https://nvd.nist.gov/vuln/detail/CVE-2026-119053, https://www.vulncheck.com/advisories/lwip-2.0.0-through-2.2.1-snmp-agent-out-of-bounds-read-via-snmp-pbuf-stream-writeto, https://github.com/lwip-tcpip/lwip/commit/e98415014aca66ef0daefded8020763b9279a3b2, https://git.savannah.nongnu.org/git/lwip.git, https://github.com/lwip-tcpip/lwip, https://github.com/lwip-tcpip/lwip/blob/77dcd25a72509eb83f72b033d219b1d40cd8eb95/src/apps/snmp/snmp_pbuf_stream.c#L111-L122

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- d5dd5241e76a38e75f0469ca77376314037b2e7c
    Fixed -e98415014aca66ef0daefded8020763b9279a3b2

    Affected versions

    STABLE-2_2_1_RELEASE

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-119053 | CVE-DB