lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.
Fix
Vendor advisories in the News 1
- Savannah lwIP SMTP client CISA ICS Advisories · 2026-10-06
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
In the news 1
- Savannah lwIP SMTP client CISA advisories and alerts · 2026-10-06
Change history 1
- First seenCVSS 9.3NVD modified 2026-10-11 17:17
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.