Skip to content
OpenAdvisories

Vendor

Golioth

4 known vulnerabilities.

Products

Firmware SDK 3 Pouch 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-23750

    Golioth Pouch (prior to commit 1b2219a1) BLE GATT Heap-based Buffer Overflow

    Golioth Pouch version 0.1.0, prior to commit 1b2219a1, contains a heap-based buffer overflow in BLE GATT server certificate handling. server_cert_write() allocates a heap buffer of size CONFIG_POUCH_SERVER_CERT_MAX_LEN when receiving the first fragment, then …

    Golioth Pouch