CVE-2024-47181

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementations of the Contiki-NG operating system. The problem can occur when either one of these RPL implementations is enabled and connected to an RPL instance. If an IPv6 packet containing an odd number of padded bytes before the RPL option, it can cause the rpl_ext_header_hbh_update function to read a 16-bit integer from an odd address. The impact of this unaligned read is architecture-dependent, but can potentially cause the system to crash. The problem has not been patched as of release 4.9, but will be included in the next release. One can apply the changes in Contiki-NG pull request #2962 to patch the system or wait for the next release.

• CWE-704

• https://github.com/contiki-ng/contiki-ng/pull/2962Issue Tracking, Patch
• https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-crjw-x84h-h6x3Vendor Advisory

Published

Nov 27, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47176CUPS is a standards-based, open-source printing system, and …5.3
• CVE-2024-47177Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-47178basic-auth-connect is Connect's Basic Auth middleware in its…5.3
• CVE-2024-47179RSSHub is an RSS network. Prior to commit 64e00e7, RSSHub's …8.8
• CVE-2024-4718A vulnerability was found in Campcodes Complete Web-Based Sc…6.1
• CVE-2024-47180Shields.io is a service for concise, consistent, and legible…8.8
• CVE-2024-47182Dozzle is a realtime log viewer for docker containers. Befor…7.5
• CVE-2024-47183Parse Server is an open source backend that can be deployed …8.1
• CVE-2024-47184Ampache is a web based audio/video streaming application and…4.8
• CVE-2024-47186Filament is a collection of full-stack components for Larave…6.1
• CVE-2024-47187Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2024-47188Suricata is a network Intrusion Detection System, Intrusion …7.5