CVE-2020-8916: Openthread Wpantund

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver (eg: debug environments) can allow an attacker to crash the service (DoS). We recommend updating, or to restrict access in your debug environments.

Affected products

• Openthread Wpantund: up to and including 2020-05-28

Published 2020-07-07. Last modified 2026-06-17.