All 32 CVE vulnerabilities found in contiki-ng, with AI-generated Chinese analysis, references, and POCs.
This page aggregates security vulnerability data for the Contiki-NG embedded operating system, focusing on software weaknesses and their associated tags. The collection encompasses a comprehensive range of reported issues, including memory corruption, privilege escalation, and denial of service flaws, spanning the product's entire development history from its initial release to the most recent stable versions. Visitors can utilize this resource to track official vendor advisories, analyze the prevalence and impact of specific weakness classes within constrained IoT environments, or review the complete vulnerability timeline for this particular firmware. By centralizing these security findings, the page serves as a critical reference for developers, security researchers, and system administrators responsible for maintaining the integrity of Contiki-NG deployments. The data presented here is derived from public disclosures and vendor announcements, offering an unfiltered view of the security landscape surrounding this open-source platform. Users seeking to understand the evolution of security practices in low-power wireless networks will find detailed context on how past vulnerabilities were addressed and what mitigation strategies were implemented. This archive supports proactive risk assessment and aids in the configuration of robust security policies for devices running the Contiki-NG stack.
Vendor: contiki-ng
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2021-21281 | Buffer overflow due to unvalidated TCP data offset CWE-120 | 7.0 | High | 2021-06-18 |
| CVE-2021-21282 | Buffer overflow in RPL source routing header processing CWE-120 | 8.6 | High | 2021-06-18 |
All 32 known CVE vulnerabilities affecting contiki-ng with full Chinese analysis, references, and POCs where available.