CVE-2019-9004

7.5 highEPSS 1.5%

In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a single crafted packet leads to leaking (wasting) 24 bytes of memory. This can lead to termination of the LWM2M server after exhausting all available memory.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-401
Published: 2019-02-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

eclipse:wakaama

References

https://github.com/eclipse/wakaama/issues/425
https://github.com/eclipse/wakaama/issues/425

Check your stack JSON