CVE-2022-36053

CVE-2022-36053 is a high-severity vulnerability affecting Contiki-NG, an open-source operating system for IoT devices. The flaw, a lack of bounds checking in the IPv6 network stack's buffer module, allows an attacker to craft a malicious packet that causes the system to read data outside the intended buffer. This remote vulnerability (AV:N) is easily exploitable (AC:L, PR:L, UI:N) and can lead to high impact across confidentiality, integrity, and availability (C:H, I:H, A:H). Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.