CVE-2026-121513
HighCVSS 7.5Summary
Off-by-one heap overflow in the µD3TN v0.15.1 SPP parser allows an unauthenticated remote attacker to reliably cause DoS.
Risk Assessment
A remote unauthenticated attacker can reliably disrupt or crash a µD3TN-based communication service.
Recommendation
Update µD3TN to a patched version or restrict network access to the service to trusted sources.
Other vulnerabilities in µD3TN
See all- CVE-2026-121512High
Memory leak with amplification in µD3TN BPv6 EID reference handling allows an unauthenticated remote attacker to cause DoS.
- CVE-2026-121511High
Heap out-of-bounds read in the µD3TN BPv6/BPv7 fragmenter allows a local attacker to read memory and reliably cause DoS.
- CVE-2026-121510High
Remote unauthenticated heap out-of-bounds write in the µD3TN BPv6 administrative record parser allows an unauthenticated remote attacker to reliably cause DoS.
- CVE-2026-121508Medium
Use-After-Free in µD3TN BPv6 Fragmenter Cleanup allows an unauthenticated remote attacker to cause DoS on allocation failure.
- CVE-2026-121507Medium
Double Free in µD3TN BPv6 Fragmenter Block Duplication allows an unauthenticated remote attacker to cause DoS on allocation failure.
- CVE-2026-93652High
Integer overflow in µD3TN v0.15.0 TCPCLv3 handshake causes heap overflow, allowing remote attackers to reliably cause DoS.
Original NVD description (English source)
Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS
Vulnerability data from NVD (NIST) · CISA KEV · EPSS