CVE-2018-16666: Contiki-NG Contiki-Ng.

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in next_string in os/storage/antelope/aql-lexer.c while parsing AQL (parsing next string).

Affected products

• Contiki-NG Contiki-Ng.: up to and including 4.1

Published 2018-09-07. Last modified 2026-06-17.