CVE-2018-12680

The Serialize.deserialize() method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, CoAP reverse proxy, example collect CoAP server and client) when they receive crafted CoAP messages.

• CWE-502

• https://github.com/Tanganelli/CoAPthon/issues/135Exploit, Issue Tracking, Third Party Advisory
• https://github.com/Tanganelli/CoAPthon/issues/135Exploit, Issue Tracking, Third Party Advisory

Published

Apr 2, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12673An attacker with remote access to the SV3C HD Camera (L-SERI…
• CVE-2018-12674The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B …
• CVE-2018-12675The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B …
• CVE-2018-12678Portainer before 1.18.0 supports unauthenticated requests to…
• CVE-2018-12679The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.…
• CVE-2018-1268Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96…6.8
• CVE-2018-12684Out-of-bounds Read in the send_ssi_file function in civetweb…
• CVE-2018-12687tinyexr 0.9.5 has an assertion failure in DecodePixelData in…
• CVE-2018-12688tinyexr 0.9.5 has a segmentation fault in the wav2Decode fun…
• CVE-2018-12689phpLDAPadmin 1.2.2 allows LDAP injection via a crafted serve…9.8
• CVE-2018-1269Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96…
• CVE-2018-12691Time-of-check to time-of-use (TOCTOU) race condition in org.…