High severity7.5NVD Advisory· Published Apr 17, 2024· Updated Jun 17, 2026

CVE-2024-31031

Description

An issue in coap_pdu.c in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Libcoap/Libcoapcpe-rescue3 versions
(expand)+ 2 more
- (no CPE)
- (no CPE)range: <4.3.4
- cpe:2.3:a:libcoap:libcoap:4.3.4:*:*:*:*:*:*:*
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/obgm/libcoap/issues/1351nvdExploitIssue Tracking
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPENEJBV3KSASIYKNZAKXDAH7Q66KPYG/nvdMailing ListThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUL7QDYFGEIJVO2ZSG4O5HEAWR6PFC52/nvdMailing ListThird Party Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/LPENEJBV3KSASIYKNZAKXDAH7Q66KPYG/nvd
lists.fedoraproject.org/archives/list/[email protected]/message/TUL7QDYFGEIJVO2ZSG4O5HEAWR6PFC52/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000