CVE-2024-41125

CVE-2024-41125 is a critical out-of-bounds read vulnerability affecting Contiki-NG, an open-source operating system for IoT devices, specifically within its SNMP module. An attacker can trigger this 1-byte out-of-bounds read by sending a crafted SNMP packet to a device with SNMP enabled. With a CVSS score of 9.6 (CRITICAL), this vulnerability has a network attack vector, low attack complexity, and can lead to high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, nor are there public exploit modules like Metasploit or Nuclei, though it has garnered significant community discussion.