Stack-based Buffer Overflow in libcoap Affects Open Source Networking Applications

CVE-2025-34468

What is CVE-2025-34468?

A stack-based buffer overflow vulnerability exists in libcoap, specifically in the address resolution process. This flaw occurs when attacker-controlled hostname data is copied into a fixed 256-byte stack buffer, lacking proper bounds checking. As a result, a remote attacker could exploit this vulnerability to crash affected applications and, depending on compiler options and runtime memory configurations, potentially gain remote code execution. Notably, the exploitation of this vulnerability requires the proxy logic to be enabled within applications utilizing libcoap.

References