中
6.9
lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability...
CVE-2026-119053
SecPulse初出
影響パッケージ
| 種類 | パッケージ | 影響を受ける版 | 直った版 |
|---|---|---|---|
| lwIP | lwIP |
2.0.0 〜 2.2.1 |
— |
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmp_pbuf_stream_writeto() that bounds copies by pbuf->len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent receive-buffer or pool memory echoed in responses.
出典: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory