Skip to content
OpenAdvisories

Package · Debian

lwip

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-119053

    lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read via snmp_pbuf_stream_writeto()

    lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmp_pbuf_stream_writeto() that bounds copies by pbuf->len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send frag…

    lwIP lwIP lwip lwip Debian Ubuntu
  • Medium 5.9
    CVE-2026-112062

    lwIP through 2.2.1 Stack Out-of-Bounds Write via mDNS Search Response Handler

    lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. Attackers on the local link can send multicast PTR answer…

    lwIP lwIP lwip lwip Debian Ubuntu