← Database

CVE-2021-42147

CRITICAL CVSS: 9.1 Published: 2024-01-24 Modified: 2026-06-17

Description

Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cause a denial of service via crafted data packet.

Affected Platforms

Contiki-Ng Tinydtls

Weakness Type

CWE-125, CWE-125

References