CVE-2020-14937: Contiki-NG

Critical severity, CVSS 9.1. EPSS: 1.5% chance of exploitation in the next 30 days.

Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. The length of provided input/output buffers is insufficiently verified during the encoding and decoding of data. This may lead to out-of-bounds buffer read or write access in BER decoding and encoding functions.

Affected products

• Contiki-NG Contiki-NG: from 4.4, up to and including 4.5

Published 2020-08-18. Last modified 2026-06-17.