CVE-2021-42144 – Contiki-NG tinyDTLS dtls_ccm_decrypt_message() Buffer Overread

https://notcve.org/view.php?id=CVE-2021-42144

18 Jan 2024 — Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input to dtls_ccm_decrypt_message(). Vulnerabilidad de lectura excesiva del búfer en Contiki-NG tinyDTLS a través de la rama maestra 53a0d97 permite a los atacantes obtener información confidencial a través de entradas manipuladas en dtls_ccm_decrypt_message(). An issue was discovered in Contiki-NG tinyDTLS versions through 2018-08-30. Incorrect handling of over-large... • https://seclists.org/fulldisclosure/2024/Jan/17 • CWE-125: Out-of-bounds Read •