CVE-2022-36052

CVE-2022-36052 is an out-of-bounds read vulnerability in the 6LoWPAN implementation of Contiki-NG, an open-source operating system for IoT devices, affecting versions prior to 4.8. This flaw allows an attacker to cause an out-of-bounds read by sending specially crafted 6LoWPAN packets, as the system does not adequately check packet buffer size before casting a UDP header. With a CVSS score of 8.8 (HIGH), it presents a significant risk with a network attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.