What’s Vulnerable › Vulnerabilities

CVE-2019-8359

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-23 · updated 2026-06-17
• Weakness: CWE-787

Description

An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. An out of bounds write is present in the data section during 6LoWPAN fragment re-assembly in the face of forged fragment offsets in os/net/ipv6/sicslowpan.c.

Affected products

• contiki-ng: through 4.3
• Contiki-Os Contiki: through 3.0

References

• https://github.com/contiki-ng/contiki-ng/pull/972
• https://github.com/contiki-ng/contiki-ng/releases/tag/release%2Fv4.4
• https://www.usenix.org/system/files/sec20summer_clements_prepub.pdf
• https://github.com/contiki-ng/contiki-ng/pull/972
• https://github.com/contiki-ng/contiki-ng/releases/tag/release%2Fv4.4
• https://www.usenix.org/system/files/sec20summer_clements_prepub.pdf

Get alerted when CVE-2019-8359 or the next vulnerability affects your stack