DEBIAN-CVE-2026-119053: Medium severity debian/lwip vulnerability

Published Oct 29, 2026

Updated

lwIP 2.0.0 through 2.2.1 built with the SNMP agent contains an out-of-bounds read vulnerability in snmppbufstreamwriteto() that bounds copies by pbuf->len instead of remaining bytes. Remote unauthenticated attackers knowing the read community can send fragmented SNMP requests to receive adjacent receive-buffer or pool memory echoed in responses.

Affected Software

3 affected components

debian/lwip*

Event History

Oct 29, 2026

CVE Published

via OSV·02:17 PM

Data Sourced

via OSV·02:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments are exposed to this issue?

Affected deployments use lwIP versions 2.0.0 through 2.2.1 with the SNMP agent built in. Exploitation also requires that the attacker can reach the SNMP service and knows the read community.

What does an attacker need to do to exploit it?

A remote, unauthenticated attacker can send fragmented SNMP requests using the read community. The flaw can cause adjacent receive-buffer or pool memory to be echoed in SNMP responses.

What is the impact of successful exploitation?

The issue exposes memory contents adjacent to the receive buffer or pool through returned responses. The provided severity vector indicates confidentiality impact only, with no stated integrity or availability impact.

DEBIAN-CVE-2026-119053: Medium severity debian/lwip vulnerability

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to do to exploit it?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to do to exploit it?

What is the impact of successful exploitation?