CVE-2024-41126: Out-of-bounds read when decoding SNMP messages in Contiki-NG
Vulnerability summary
CVE-2024-41126 is a critical (CVSS 9.6) Out-of-bounds Read vulnerability in contiki-ng. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20.9% of scored vulnerabilities.
Timeline
- 27-11-2024PublishedVulnerability first disclosed.
- 27-11-2024Last modifiedVulnerability information updated.
Description
Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The vulnerability exists in the os/net/app-layer/snmp/snmp-message.c module, where the snmp_message_decode function fails to check the boundary of the message buffer when reading a byte from it immediately after decoding an object identifier (OID). The problem has been patched in Contiki-NG pull request 2937. It will be included in the next release of Contiki-NG. Users are advised to either apply the patch manually or to wait for the next release. A workaround is to disable the SNMP module in the Contiki-NG build configuration.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA8.4HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.29%
Chance of exploitation in the next 30 days
Percentile
21%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.29% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Contiki-ng1 product
- contiki-ng≤ 4.9
1 vendor · 1 product
References
2 links- github.com/contiki-ng/contiki-ng/security/advisories/GHSA-444j-93j3-5gj4X Refsource CONFIRMVendor Advisory