LoRaWAN Application Layer Clock Synchronization Vulnerability in Zephyr Project

CVE-2026-13479

What is CVE-2026-13479?

The LoRaWAN application-layer clock-synchronization service is susceptible to a buffer over-read flaw due to inadequate length checks in the command processing logic. Specifically, when handling the AppTimeAns command, the implementation fails to verify that enough bytes remain in the receive buffer before accessing a multi-byte time correction and token. As a result, an attacker with access to the network could potentially manipulate the device's clock offset using invalid data, which could lead to minor integrity impacts confined to the device's time estimation. A fix has been integrated to enforce stricter length validations for incoming commands, mitigating the risk of this vulnerability.

References