CVE-2020-12887

CVE-2020-12887 describes memory leaks in the CoAP library of Arm Mbed OS 5.15.3 and Arm mbed-coap library 5.1.5. An attacker can craft a malicious CoAP packet that exploits an integer overflow in the option number parsing, leading to multiple memory allocations for the same pointer without proper checks. This results in memory being orphaned and never freed, causing a denial of service. The vulnerability has a CVSS score of 7.5 (High) due to its network-based attack vector and low attack complexity, with a high impact on availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.