CVE-2024-31031: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow.

Affected products

• Fedoraproject Fedora: version 39 only; version 40 only
• Libcoap Libcoap: version 4.3.4 only

Published 2024-04-17. Last modified 2026-06-17.