CVE-2020-12141: Contiki-NG

Critical severity, CVSS 9.1. EPSS: 1.6% chance of exploitation in the next 30 days.

An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service and potentially disclose information via crafted SNMP packets to snmp_ber_decode_string_len_buffer in os/net/app-layer/snmp/snmp-ber.c.

Affected products

• Contiki-NG Contiki-NG: up to and including 4.4

Published 2021-10-19. Last modified 2026-06-17.