lwIP vulnerabilities
We track 2 vulnerabilities in lwIP products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 22, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest lwIP vulnerabilities
- 8.8 High severity
lwIP API: Double Free
lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system.
- 9.8 Critical severity
lwIP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-ba