CVE Tools
Track your stack

Libcoap

9 CVEs tracked since 2025. Since Nov 2025, none of them reached CISA KEV.

Libcoap CVEs per month

Nov 2025 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Libcoap CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-1190
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Libcoap's monthly top three, with their CVEs summed over those months.

  1. Libcoap91 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Libcoap.

  1. CVE-2026-29013libcoap Out-of-Bounds Read in OSCORE CBOR Unwrap Handling9.8
  2. CVE-2025-34468libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE9.8
  3. CVE-2025-59391A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches. An out-of-bounds read may occur when parsing certain configuration values,...6.5
  4. CVE-2025-65493NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS/TLS connection that triggers BIO_get_data() to return NULL.7.5
  5. CVE-2025-65496NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers S...4.3
  6. CVE-2025-65501Null pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a DTLS handshake where SSL_get_app_data() returns NULL.4.3
  7. CVE-2025-65498NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers S...4.3
  8. CVE-2025-65497NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers S...4.3
  9. CVE-2025-65494NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted X.509 certificate that causes sk...7.5
  10. CVE-2025-65500NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers S...4.3
  11. CVE-2025-65499Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_ex_da...4.3
  12. CVE-2025-65495Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS certificate that causes i2d_X50...7.5
  13. CVE-2024-31031An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow.7.5
  14. CVE-2024-0962obgm libcoap Configuration File coap_oscore.c get_split_entry stack-based overflow6.3
  15. CVE-2023-30362Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu.7.5

The record

Peak rank
#81 in Nov 2025
Busiest month shown
Nov 2025, 9 CVEs
Months with a KEV entry
0 since Nov 2025
Monthly snapshots
1 since 2025
Libcoap's full record, month by month