CVE-2023-48229: Out-of-bounds write in the radio driver for Contiki-NG nRF platforms

Published Feb 14, 2024
·
Updated

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds write exists in the driver for IEEE 802.15.4 radios on nRF platforms in the Contiki-NG operating system. The problem is triggered when parsing radio frames in the `read_frame` function in the `arch/cpu/nrf/net/nrf-ieee-driver-arch.c` module. More specifically, the `read_frame` function performs an incomplete validation of the payload length of the packet, which is a value that can be set by an external party that sends radio packets to a Contiki-NG system. Although the value is validated to be in the range of the MTU length, it is not validated to fit into the given buffer into which the packet will be copied. The problem has been patched in the "develop" branch of Contiki-NG and is expected to be included in subsequent releases. Users are advised to update their develop branch or to update to a subsequent release when available. Users unable to upgrade should consider manually applying the changes in PR #2741.

Affected Software

1 affected component
Contiki-NG Contiki-NG<=4.9

Event History

Feb 14, 2024
CVE Published
via MITRE·06:30 PM
Data Sourced
via MITRE·06:30 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-48229?

CVE-2023-48229 has been classified as a high severity vulnerability.

2

How do I fix CVE-2023-48229?

To fix CVE-2023-48229, upgrade the Contiki-NG operating system to version 4.10 or later.

3

What components are affected by CVE-2023-48229?

CVE-2023-48229 affects the driver for IEEE 802.15.4 radios on nRF platforms in the Contiki-NG OS.

4

What causes the vulnerability CVE-2023-48229?

CVE-2023-48229 is triggered by an out-of-bounds write when parsing radio frames.

5

Which versions of Contiki-NG are vulnerable to CVE-2023-48229?

Versions of Contiki-NG up to and including 4.9 are vulnerable to CVE-2023-48229.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203