libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coap_oscore.c.
{ "ubuntu_priority": "medium" }