CVE-2024-46304: Libcoap

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a denial of service via the coap_handle_request_put_block function in src/coap_block.c.

Affected products

• Libcoap Libcoap: version 4.3.5-rc2 only

Published 2024-10-09. Last modified 2026-06-17.