CVE-2020-22284: Lwip Project Lwip

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software Foundation lwIP git head version and version 2.1.2 allows attackers to access sensitive information via a crafted 6LoWPAN packet.

Affected products

• Lwip Project Lwip: version 2.1.2 only

Published 2021-07-22. Last modified 2026-06-17.