CVE-2025-59391

Name of the Vulnerable Software and Affected Versions libcoap versions prior to 4.3.5-patches

Description A memory disclosure issue exists in libcoap's OSCORE configuration parser. An out-of-bounds read can occur when parsing specific configuration values, potentially allowing an attacker to infer or read memory beyond string boundaries in the .rodata section. This could lead to information disclosure or denial of service.

Recommendations Update to version 4.3.5-patches or later.