Lwip vulnerabilities
3 vulnerabilities
Known vulnerabilities in Lwip products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Lwip1 vulnerabilities
- Lwip API1 vulnerabilities
- Tcp/Ip Stack MQTT1 vulnerabilities
MediumCVE-2026-112062debian · lwip +1 morelwIP through 2.2.1 Stack Out-of-Bounds Write via mDNS Search Response HandlerlwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. Attackers on the local link can send multicast PTR answers with oversized RDLENGTH or SRV answers with RDLENGTH below 6 during a service search, overflowing a 256-byte stack buffer and crashing the device.EPSS0.23%HighCVE-2026-91018debian · lwip +2 moreDouble Free in lwIP (lightweight IP)lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system.EPSS0.24%CriticalCVE-2026-87121debian · lwip +2 moreOut-of-bounds write in lwIP TCP/IP Stack MQTT Client ApplicationlwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device.EPSS0.53%