Skip to content
Threat Feed

Product

LwIP (<= 2.2.1)

1 brief RSS
critical advisory

lwIP SNMPv3 USM Handler Stack-Based Buffer Overflow (CVE-2026-8836)

A stack-based buffer overflow vulnerability (CVE-2026-8836) exists in lwIP up to version 2.2.1 within the snmpv3 USM Handler, allowing remote attackers to execute arbitrary code by manipulating the `msgAuthenticationParameters` argument in the `snmp_parse_inbound_frame` function.

lwIP snmp buffer_overflow rce CVE-2026-8836
2r 3t 1c