01 Record

CVE-2026-12363

Out-of-bounds write in LoRaWAN fragmented transport from a fragment index of 0

MediumPUBLISHEDCNA: zephyr

Base score4.2 CVSS v3.xCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

02 Description

Out-of-bounds write in LoRaWAN fragmented transport from a fragment index of 0

Published: 2026-08-14 17:52Z2 HR AGO
Last updated: 2026-08-14 19:26Z1 HR AGO
Reserved: 2026-06-16
Assigning CNA: zephyr
Record state: PUBLISHED
Severity: Medium (CVSS 4.2)
CVSS vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
Weaknesses: CWE-787
SSVC decision: ExploitationnoneAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: 0f11db3cb2fd55948521ea7a82a5a6247cbbfa380948469355f71287633f4d07

VendorProductVersionsPlatforms

zephyrprojectzephyr3.7.0 to < 4.5.0—