CVE-2020-13985: Contiki-OS Contiki

High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days.

An issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in rpl_remove_header in net/rpl/rpl-ext-header.c.

Affected products

• Contiki-OS Contiki: up to and including 3.0

Published 2020-12-11. Last modified 2026-06-17.