RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, nanocoap accepts oversized CoAP Block2 option values without enforcing the 20-bit maximum block number, allowing block offset multiplication to overflow on 32-bit targets. The affected master baseline is commit aeeae69e; the verified fix is later on master and remains unreleased. The oversized value passes from coap_get_blockopt() to coap_block_slicer_init(). A remote CoAP client can send a malformed Block2 option that produces an invalid slice range and can cause out-of-bounds memory access, denial of service, or memory corruption. This vulnerability is fixed in 2026.07.
{
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-190",
"CWE-787"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102692.json"
}{
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "2026.07"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"fixed": "6b283ace3565d931b3edff7e115d4f79339253b8"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "ee1fa0ef91874494823d476392572aeefdbc6b74"
}
],
"source": "REFERENCES_COMMIT"
},
{
"original_tag": "2026.07",
"range": [
{
"fixed": "a897b0498f635654f091bf9f33e9696aa773e886"
}
],
"source": "REFERENCES_TAG"
}
]
}
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-102692.json"
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"230707802916933882343338489027679230235",
"250395688316300670515854617119384359063",
"227058941513752950030054733534781032280",
"331306326664172384933103562697682817451",
"211157234898163112845565416224576322482",
"242206954159568981919773013028391639511",
"84306974687452561716202041504088024675",
"159224194640281224742226304811694859396",
"6552416190762887580079162115626266438",
"146054335474490367585120809501772985854",
"872183140096978117627505462078204026"
],
"threshold": 0.9
},
"id": "CVE-2026-102692-0270e478",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "sys/net/application_layer/gcoap/dns.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "336471168774635916007342776166613002100",
"length": 156
},
"id": "CVE-2026-102692-1a3a028f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "sys/net/application_layer/nanocoap/nanocoap.c",
"function": "coap_block_slicer_init"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "89593472708825547183338896117262062257",
"length": 554
},
"id": "CVE-2026-102692-1f2ddf97",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "sys/net/application_layer/nanocoap/fileserver.c",
"function": "_error_handler"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"53254420778908998088038751898874664378",
"225485571804922294410976184517354038241",
"300801289723353661599868298625138615673",
"272992998154468734581249398761037243337",
"84658224139220572389748467720894699333",
"284864882358012233559431309309361466841",
"54482108345644312993046101373704305724",
"276123397656316207920297847990085481433",
"217980613925245948796748861899560980010",
"297495764835454368764039147422189658386",
"322700667119041116449226794191645741638",
"288708292157831740922968082739465276904",
"7650860003421337690903458907395453636",
"300650219940560042779637408514937355463",
"73774759877763226690890617847048862581",
"13717018906718840346446248521457599839",
"211724824624654971049797585283183707152",
"49402031275208519791913352108350558112",
"161376986108086545658175523083461414698",
"319634362111523660954182935145328642684",
"168780924587277844195315890829442993918",
"276720614934284045524936257663779152640",
"284948903249450080274743728471393569474",
"290517421539076561239741608120764898268"
],
"threshold": 0.9
},
"id": "CVE-2026-102692-29c12bc3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "sys/net/application_layer/nanocoap/nanocoap.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "171633288251279798282760634541120391381",
"length": 1180
},
"id": "CVE-2026-102692-2b43388c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "sys/net/application_layer/gcoap/dns.c",
"function": "_do_block"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"23664719973197132144943597070347088796",
"77302518963226451024035115589451142167",
"223834112673210701134509138675260833587",
"237268971640287260440067868513190265549",
"292201309682665391838683039819205235557",
"287317209441655307495119461187133627625",
"129145732674017080650107658226865547681",
"205093821258137749168647994112949693217"
],
"threshold": 0.9
},
"id": "CVE-2026-102692-2c67c322",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "examples/networking/coap/gcoap_block_server/gcoap_block.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"53254420778908998088038751898874664378",
"225485571804922294410976184517354038241",
"300801289723353661599868298625138615673",
"272992998154468734581249398761037243337",
"84658224139220572389748467720894699333",
"284864882358012233559431309309361466841",
"54482108345644312993046101373704305724",
"276123397656316207920297847990085481433",
"217980613925245948796748861899560980010",
"297495764835454368764039147422189658386",
"322700667119041116449226794191645741638",
"288708292157831740922968082739465276904",
"7650860003421337690903458907395453636",
"300650219940560042779637408514937355463",
"73774759877763226690890617847048862581",
"13717018906718840346446248521457599839",
"211724824624654971049797585283183707152",
"49402031275208519791913352108350558112",
"161376986108086545658175523083461414698",
"319634362111523660954182935145328642684",
"168780924587277844195315890829442993918",
"276720614934284045524936257663779152640",
"284948903249450080274743728471393569474",
"290517421539076561239741608120764898268"
],
"threshold": 0.9
},
"id": "CVE-2026-102692-2cfcc843",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "sys/net/application_layer/nanocoap/nanocoap.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "336471168774635916007342776166613002100",
"length": 156
},
"id": "CVE-2026-102692-2d84a53b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "sys/net/application_layer/nanocoap/nanocoap.c",
"function": "coap_block_slicer_init"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"319634362111523660954182935145328642684",
"168780924587277844195315890829442993918",
"276720614934284045524936257663779152640",
"284948903249450080274743728471393569474",
"290517421539076561239741608120764898268"
],
"threshold": 0.9
},
"id": "CVE-2026-102692-4042e09f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "examples/networking/coap/nanocoap_server/coap_handler.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"55887954244655613117868906914861840930",
"208400251971681392832227737011467236255",
"27157017969647534413738565023754843257",
"104900021288254686504820221704903917692",
"105397557414047167499696030527934821141",
"89702129053108105532987585216130813455"
],
"threshold": 0.9
},
"id": "CVE-2026-102692-472874c5",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "sys/include/net/nanocoap.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "92837702125263470746856442570611810262",
"length": 1417
},
"id": "CVE-2026-102692-5bf039f7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "examples/networking/coap/gcoap_block_server/gcoap_block.c",
"function": "_riot_block2_handler"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"23664719973197132144943597070347088796",
"77302518963226451024035115589451142167",
"223834112673210701134509138675260833587",
"237268971640287260440067868513190265549",
"292201309682665391838683039819205235557",
"287317209441655307495119461187133627625",
"129145732674017080650107658226865547681",
"205093821258137749168647994112949693217"
],
"threshold": 0.9
},
"id": "CVE-2026-102692-5c67c50d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "examples/networking/coap/gcoap_block_server/gcoap_block.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "171633288251279798282760634541120391381",
"length": 1180
},
"id": "CVE-2026-102692-5d341a86",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "sys/net/application_layer/gcoap/dns.c",
"function": "_do_block"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"174803797142297429461274806725740614194",
"84345549187545271870317610581627283183",
"10043293788471973437210917321071811047",
"250895381998944206174356614892708574839",
"234723897644953348914159238318297262808",
"291921076820627127505808203451734535355",
"112122818161750879417972606949272014984",
"157399631670216698447037204346524638884",
"215449069090698749094229940126572073616",
"275100448391544211429890111193371352842",
"247339427484353668680039332851664055147",
"144758943835134824956996455334933710456"
],
"threshold": 0.9
},
"id": "CVE-2026-102692-607bfd9e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "sys/net/application_layer/nanocoap/fileserver.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "91480189859347914166899924278461575272",
"length": 2292
},
"id": "CVE-2026-102692-67a3f7e4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "sys/net/application_layer/nanocoap/fileserver.c",
"function": "_get_file"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "179003424194717472813364651500051808235",
"length": 729
},
"id": "CVE-2026-102692-684eed90",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "sys/net/application_layer/nanocoap/nanocoap.c",
"function": "coap_well_known_core_default_handler"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "325317422354177187688499382145821218228",
"length": 339
},
"id": "CVE-2026-102692-686cb897",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "sys/net/application_layer/nanocoap/nanocoap.c",
"function": "coap_block2_init"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "89593472708825547183338896117262062257",
"length": 554
},
"id": "CVE-2026-102692-6a8248ed",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "sys/net/application_layer/nanocoap/fileserver.c",
"function": "_error_handler"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "92837702125263470746856442570611810262",
"length": 1417
},
"id": "CVE-2026-102692-6c318c19",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "examples/networking/coap/gcoap_block_server/gcoap_block.c",
"function": "_riot_block2_handler"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "91480189859347914166899924278461575272",
"length": 2292
},
"id": "CVE-2026-102692-7534136a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "sys/net/application_layer/nanocoap/fileserver.c",
"function": "_get_file"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"55887954244655613117868906914861840930",
"208400251971681392832227737011467236255",
"27157017969647534413738565023754843257",
"104900021288254686504820221704903917692",
"105397557414047167499696030527934821141",
"89702129053108105532987585216130813455"
],
"threshold": 0.9
},
"id": "CVE-2026-102692-7a7d8085",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "sys/include/net/nanocoap.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "283458381048053011708706219971359939861",
"length": 1042
},
"id": "CVE-2026-102692-7ad40b5f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "examples/networking/coap/nanocoap_server/coap_handler.c",
"function": "_riot_block2_handler"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "325317422354177187688499382145821218228",
"length": 339
},
"id": "CVE-2026-102692-7bd51991",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "sys/net/application_layer/nanocoap/nanocoap.c",
"function": "coap_block2_init"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"319634362111523660954182935145328642684",
"168780924587277844195315890829442993918",
"276720614934284045524936257663779152640",
"284948903249450080274743728471393569474",
"290517421539076561239741608120764898268"
],
"threshold": 0.9
},
"id": "CVE-2026-102692-96034648",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "examples/networking/coap/nanocoap_server/coap_handler.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "283458381048053011708706219971359939861",
"length": 1042
},
"id": "CVE-2026-102692-a1e54510",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "examples/networking/coap/nanocoap_server/coap_handler.c",
"function": "_riot_block2_handler"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"230707802916933882343338489027679230235",
"250395688316300670515854617119384359063",
"227058941513752950030054733534781032280",
"331306326664172384933103562697682817451",
"211157234898163112845565416224576322482",
"242206954159568981919773013028391639511",
"84306974687452561716202041504088024675",
"159224194640281224742226304811694859396",
"6552416190762887580079162115626266438",
"146054335474490367585120809501772985854",
"872183140096978117627505462078204026"
],
"threshold": 0.9
},
"id": "CVE-2026-102692-a49192a0",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "sys/net/application_layer/gcoap/dns.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "31725450682596846788461123832930015059",
"length": 668
},
"id": "CVE-2026-102692-c06bbb44",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "sys/net/application_layer/nanocoap/nanocoap.c",
"function": "coap_get_blockopt"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "31725450682596846788461123832930015059",
"length": 668
},
"id": "CVE-2026-102692-ddf621c8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "sys/net/application_layer/nanocoap/nanocoap.c",
"function": "coap_get_blockopt"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "5867999302303062357143919909116825753",
"length": 1804
},
"id": "CVE-2026-102692-e173eb03",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "sys/net/application_layer/nanocoap/fileserver.c",
"function": "_get_directory"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"174803797142297429461274806725740614194",
"84345549187545271870317610581627283183",
"10043293788471973437210917321071811047",
"250895381998944206174356614892708574839",
"234723897644953348914159238318297262808",
"291921076820627127505808203451734535355",
"112122818161750879417972606949272014984",
"157399631670216698447037204346524638884",
"215449069090698749094229940126572073616",
"275100448391544211429890111193371352842",
"247339427484353668680039332851664055147",
"144758943835134824956996455334933710456"
],
"threshold": 0.9
},
"id": "CVE-2026-102692-e51adacd",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "sys/net/application_layer/nanocoap/fileserver.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "179003424194717472813364651500051808235",
"length": 729
},
"id": "CVE-2026-102692-f363614c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/ee1fa0ef91874494823d476392572aeefdbc6b74",
"target": {
"file": "sys/net/application_layer/nanocoap/nanocoap.c",
"function": "coap_well_known_core_default_handler"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "5867999302303062357143919909116825753",
"length": 1804
},
"id": "CVE-2026-102692-fcc30a37",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/riot-os/riot/commit/6b283ace3565d931b3edff7e115d4f79339253b8",
"target": {
"file": "sys/net/application_layer/nanocoap/fileserver.c",
"function": "_get_directory"
}
}
]
"2026-11-07T07:05:06Z"