CVE

CVE numbers obtained as part of security assessments.


CVE-2022-46078

Integer overflow in ipv4ReassembleDatagram function handling IPv4 packet fragmentation. Offset which are user-controlled are not properly handled leading to an overflow.

Date: 2022-07-22

CVE-2021-26788

Oryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input validation in TCP options, which may cause a denial of service (DoS).

Date: 2021-03-08