Every CVE Search/ Get API key

OSV-2022-150

Heap-buffer-overflow in coap_split_uri_sub

No score

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44611

Crash type: Heap-buffer-overflow READ 1 Crash state: coap_split_uri_sub coap_get_uri_path

What each source reports

OSV No score

Heap-buffer-overflow in coap_split_uri_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44611

Crash type: Heap-buffer-overflow READ 1 Crash state: coap_split_uri_sub coap_get_uri_path

Record
OSV-2022-150
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
libcoap
OSS-Fuzz
Listed versions, plus commit ranges
v4.3.1v4.3.1-rc1v4.3.1-rc2v4.3.2-rc1v4.3.2-rc2
Show 10 moreShow less
v4.3.2v4.3.3v4.3.4v4.3.4av4.3.5-rc1v4.3.5-rc2v4.3.5-rc3v4.3.5v4.3.5av4.3.5b
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2022-150 is a vulnerability with no CVSS score yet in libcoap, published February 14, 2022. No source lists public exploit code. No source names a fixed version.

References

MoveEnter Open