Unaligned Memory Access Vulnerability in Contiki-NG Operating System
CVE-2024-47181
7.5HIGH
What is CVE-2024-47181?
Contiki-NG, the open-source operating system designed for IoT devices, has a vulnerability related to unaligned memory access in its RPL implementations. When certain configurations are enabled, an IPv6 packet containing an improper payload may lead to the rpl_ext_header_hbh_update function attempting to read a 16-bit integer from an unaligned address. The system's response to this can differ based on architecture, with potential crashes observed. While this issue has not been resolved in version 4.9, users can implement changes suggested in Contiki-NG pull request #2962 or await future updates for a permanent fix.