Skip to content
OpenAdvisories

Vendor

lwIP

4 known vulnerabilities.

Products

lwIP 2 lwIP API 1 TCP/IP Stack MQTT 1 API 0 MQTT Client Application 0
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-87121

    Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application

    lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device.

    lwIP TCP/IP Stack MQTT lwip lwip Debian Ubuntu