Vulnerability Description
A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse() parses the CoAP packet header starting from the message token. The length of the token in the received message is provided in the first byte parsed by the sn_coap_parser_options_parse() function. The length encoded in the message is not validated against the actual input buffer length before accessing the token. As a result, memory access outside of the intended boundary of the buffer may occur.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Arm | Mbed Os | 5.15.3 |
Related Weaknesses (CWE)
References
- https://github.com/ARMmbed/mbed-coap/pull/116Third Party Advisory
- https://github.com/ARMmbed/mbed-os/issues/12948Third Party Advisory
- https://github.com/ARMmbed/mbed-coap/pull/116Third Party Advisory
- https://github.com/ARMmbed/mbed-os/issues/12948Third Party Advisory
FAQ
What is CVE-2020-12886?
CVE-2020-12886 is a vulnerability with a CVSS score of 9.1 (CRITICAL). A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse() parses the Co...
How severe is CVE-2020-12886?
CVE-2020-12886 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-12886?
Check the references section above for vendor advisories and patch information. Affected products include: Arm Mbed Os.