CVE-2025-34468: libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE

Published Dec 31, 2025
·
Updated

libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostname data is copied into a fixed 256-byte stack buffer without proper bounds checking. A remote attacker can trigger a crash and potentially achieve remote code execution depending on compiler options and runtime memory protections. Exploitation requires the proxy logic to be enabled (i.e., the proxy request handling code path in an application using libcoap).

Affected Software

3 affected components
redhat/libcoap<=4.3.5
Microsoft azl3 libcap 2.69-10
libcoap libcoap<=4.3.5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade libcoap to a version that resolves this vulnerability.

    Fixed in 4.3.5Patch 30db3ea
  2. Configuration

    Disable the proxy request handling code path (proxy logic) in applications using libcoap, since exploitation requires the proxy logic to be enabled.

    libcoap proxy logic / proxy request handling code path proxy request handling enabled = disable

Event History

Dec 31, 2025
CVE Published
via MITRE·06:39 PM
Data Sourced
via MITRE·06:39 PM
DescriptionWeakness
Data Sourced
via NVD·07:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 3, 2026
Data Sourced
via Microsoft·01:01 AM
DescriptionSeverityWeaknessAffected Software
Oct 4, 58194
Event
via NVD·06:06 PM

Frequently Asked Questions

1

What is the severity of CVE-2025-34468?

CVE-2025-34468 is classified as a high severity vulnerability due to the potential for remote code execution through a stack-based buffer overflow.

2

How do I fix CVE-2025-34468?

To fix CVE-2025-34468, upgrade to libcoap version 4.4.0 or later, which includes a patch for the vulnerability.

3

Which versions are affected by CVE-2025-34468?

CVE-2025-34468 affects all libcoap versions up to and including 4.3.5.

4

What type of vulnerability is CVE-2025-34468?

CVE-2025-34468 is a stack-based buffer overflow vulnerability that could be exploited by attackers.

5

Can CVE-2025-34468 lead to Denial of Service?

Yes, CVE-2025-34468 can lead to Denial of Service by crashing the affected application.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203