CVE-2024-41125 | Contiki-NG up to 4.9 SNMP Module snmp-ber.c snmp_ber_decode_string_len_buffer out-of-bounds (GHSA-qjj3-gqx7-438w)

A vulnerability was found in Contiki-NG up to 4.9 and classified as critical. Affected by this issue is the function snmp_ber_decode_string_len_buffer of the file os/net/app-layer/snmp/snmp-ber.c of the component SNMP Module. The manipulation leads to out-of-bounds read.

This vulnerability is handled as CVE-2024-41125. The attack needs to be done within the local network. There is no exploit available.

It is recommended to apply a patch to fix this issue.