CVE-2023-28116

Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write can occur in the BLE L2CAP module of the Contiki-NG operating system. The network stack of Contiki-NG uses a global buffer (packetbuf) for processing of packets, with the size of PACKETBUF_SIZE. In particular, when using the BLE L2CAP module with the default configuration, the PACKETBUF_SIZE value becomes larger then the actual size of the packetbuf. When large packets are processed by the L2CAP module, a buffer overflow can therefore occur when copying the packet data to the packetbuf. The vulnerability has been patched in the "develop" branch of Contiki-NG, and will be included in release 4.9. The problem can be worked around by applying the patch manually.

• CWE-120
• CWE-787

• https://github.com/contiki-ng/contiki-ng/pull/2398Issue Tracking, Patch
• https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-m737-4vx6-pfqpPatch, Vendor Advisory
• https://github.com/contiki-ng/contiki-ng/pull/2398Issue Tracking, Patch
• https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-m737-4vx6-pfqpPatch, Vendor Advisory

Published

Mar 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28110Jumpserver is a popular open source bastion host, and Koko i…9.9
• CVE-2023-28111Discourse is an open-source discussion platform. Prior to ve…7.5
• CVE-2023-28112Discourse is an open-source discussion platform. Prior to ve…8.1
• CVE-2023-28113russh is a Rust SSH client and server library. Starting in v…5.9
• CVE-2023-28114`cilium-cli` is the command line interface to install, manag…4.1
• CVE-2023-28115Snappy is a PHP library allowing thumbnail, snapshot or PDF …9.8
• CVE-2023-28117Sentry SDK is the official Python SDK for Sentry, real-time …6.5
• CVE-2023-28118kaml provides YAML support for kotlinx.serialization. Prior …7.5
• CVE-2023-28119The crewjam/saml go library contains a partial implementatio…7.5
• CVE-2023-2812The Ultimate Dashboard WordPress plugin before 3.7.6 does no…4.8
• CVE-2023-28120There is a vulnerability in ActiveSupport if the new bytespl…5.3
• CVE-2023-28121An issue in WooCommerce Payments plugin for WordPress (versi…9.8