Description Routers advertising the same RIO prefix share one route_list entry, and router_list_entry_index names only the latest advertiser. Each router's route_list_entry_index stays set afte...

lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. Attackers on the local link can send multicast PTR answers with oversized RDLENGTH or SRV answers with RDLENGTH below 6 during a service …

ENC28J60 Ethernet for the Raspberry Pi Pico (RP2040) in the Arduino IDE: raw frames or TCP/IP over lwIP, with SPI on any pins through a PIO program. Fork of ljanyst/pico-enc28j60. - angeloINTJ/pico...

Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker could possibly use this issue to trigger a buffer overflow, resulting in a denial of service or arbitrary code execution. (CVE-2026-74220, CVE-2026-74221) Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain HTTP data storage failures in its lwIP implementation. An attacker could possibly use this issue to trigger a use-after-free, resulting in a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-74222) Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot did not properly validate certain DHCPv6 option lengths during network boot. An attacker could possibly use this issue to trigger out-of-bounds memory access, resulting in a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-74225)

The SMTP client component of the lwIP library used in Debian does not verify how much data it receives, which could let an attacker cause the program to.

lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.

View CSAF Summary Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution. The following versions of Savannah lwIP SMTP client are affected: lwIP SMTP client 2.2.1 (CVE-2026-15340) CVSS Vendor Equipment v3 9.8 Savannah lwIP SMTP client 1 Vulnerability Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Background Critical Infrastructure Sectors: Energy, Water and Wastewater Systems Countries/Areas Deployed: Worldwide Company Headquarters Location: Sweden Vulnerabilities CVE-2026-15340 lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow. Read More 1 Affected Product Savannah lwIP SMTP client: 2.2.1 Product Status: known_affected Remediations Mitigation xchglabs reports that the vulnerability was fixed and released in the following patch: patch_125_smtp_txbuf.diff . This is available as available as git commit (614420f82c8729d070e01464c0dddb3c9525c772) Additional Metrics Relevant CWE: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CVSS Version Base Score Base Severity Vector String 3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 4.0 9.3 CRITICAL CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N View CVE Details Acknowledgments xchglabs reported this vulnerability directly to Savannah and then disclosed once the fix was released Legal Notice and Terms of Use This product is provided subject to this Notification (https://www.cisa.gov/notification ) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy ). Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. Revision History Initial Release Date: 2026-10-06 Date Revision Summary 2026-10-06 1 Initial Publication Legal Notice and Terms of Use

Sieciowy odtwarzacz audio na Waveshare OpenH743I-C z STM32H743 odtwarza MP3/WAV z microSD i radio HTTP na dotykowym ekranie 4,3″, bez systemu operacyjnego. Jedna pętla główna łączy lwIP 2.2, FatFs, minimp3, I2S2 z kodekiem WM8960 oraz podwójnie buforowany LTDC; PLL2 generuje dokładnie 512×Fs. Rdzeń pracuje z częstotliwością 360 MHz, a bufor wyrównujący audio mieści 32 768 ramek, czyli około 0,74 s przy 44,1 kHz. Odtwarzacz uzyskał działające 100 Mb/s full duplex, DHCP i ping bez strat, obsługując HTTP/1.0 z maksymalnie trzema przekierowaniami. Projekt nie obsługuje HTTPS, AAC ani .m3u8, wymaga zasilacza 5 V/2 A, a testowy moduł WM8960 ma uszkodzony prawy tor wyjściowy. Cały artykuł na stronie głównej elektroda.

Hm. ESP, lwIP und mbedTLS sind schon cool.

The lightweight IP library (lwIP) can free the same memory twice, which can cause the program to stop working, become unresponsive, or let an attacker run.