CVE-2020-24335

7.5 highEPSS 3.1%

High (7.5) in uip project uip. EPSS 3.1% chance of exploitation in the next 30 days.

An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, allowing an attacker to corrupt memory with crafted DNS packets.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-11-01)
CWE: CWE-125
Published: 2021-02-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

uip_project:uip

References

https://github.com/adamdunkels/uip
https://github.com/contiki-ng/contiki-ng
https://github.com/contiki-os/contiki
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
https://www.kb.cert.org/vuls/id/815128

Check your stack JSON