CVE-2018-12679: COAPTHON3 Project COAPTHON3

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, example collect CoAP server and client) when they receive crafted CoAP messages.

Affected products

• COAPTHON3 Project COAPTHON3: version 1.0 only; version 1.0.1 only

Published 2019-04-02. Last modified 2026-06-17.