CyberSecBulletin

ConnMan vulnerabilities

We track 2 vulnerabilities in ConnMan products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 23, 2026.

2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score

Latest ConnMan vulnerabilities

  • 7.6 High severity

    ConnMan: Stack-based Buffer Overflow

    CVE-2026-115863ConnMan

    ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/client.c. It copies a fixed NS_MAXDNAME (1025) bytes from a DHCPv6 DOMAIN_LIST (option 24) value into a 1026-byte stack buffer dns_name regard

  • 9.0 Critical severity

    ConnMan: Missing Report of Error Condition

    CVE-2025-32743ConnMan

    In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an empty string when the TC (Truncated) bit is set in a DNS response. This allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code