CVE-2018-12679

The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, example collect CoAP server and client) when they receive crafted CoAP messages.

• CWE-502

• https://github.com/Tanganelli/CoAPthon3/issues/16Exploit, Issue Tracking, Third Party Advisory
• https://github.com/Tanganelli/CoAPthon3/issues/16Exploit, Issue Tracking, Third Party Advisory

Published

Apr 2, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12671An attacker with remote access to the SV3C HD Camera (L-SERI…
• CVE-2018-12672The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B)…
• CVE-2018-12673An attacker with remote access to the SV3C HD Camera (L-SERI…
• CVE-2018-12674The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B …
• CVE-2018-12675The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B …
• CVE-2018-12678Portainer before 1.18.0 supports unauthenticated requests to…
• CVE-2018-1268Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96…6.8
• CVE-2018-12680The Serialize.deserialize() method in CoAPthon 3.1, 4.0.0, 4…
• CVE-2018-12684Out-of-bounds Read in the send_ssi_file function in civetweb…
• CVE-2018-12687tinyexr 0.9.5 has an assertion failure in DecodePixelData in…
• CVE-2018-12688tinyexr 0.9.5 has a segmentation fault in the wav2Decode fun…
• CVE-2018-12689phpLDAPadmin 1.2.2 allows LDAP injection via a crafted serve…9.8