[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fguIZMLpNE38DbjXGPpNeLmkuVH7IOJmHpbZAIB9gaMU":3,"g5a-ex:arm\u002Fmbed-coap@*":50,"g5a-family:arm\u002Fmbed-coap":52},{"success":4,"data":5},true,{"product":6,"versions":17,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":27,"seoMetadata":28,"meta":47},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":9,"kevCount":10,"lastCveUpdate":11,"versions":12,"description":16},"arm","mbed-coap",1,0,"2020-06-18",[13],{"version":14,"cve_count":9,"kev_count":10,"has_kev":15},"5.1.5",false,"Mbed-coap by Arm is a technology product with 1 tracked version and 1 known security vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[18],{"version":14,"cve_count":9,"kev_count":10,"has_kev":15},[20],{"cveId":21,"description":22,"publishedDate":11,"cvssScore":23,"cvssVersion":24,"severity":25,"isKev":15,"epssScore":26},"CVE-2020-12887","Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse() parses the CoAP option number field of all options present in the input packet. Each option number is calculated as a sum of the previous option number and a delta of the current option. The delta and the previous option number are expressed as unsigned 16-bit integers. Due to lack of overflow detection, it is possible to craft a packet that wraps the option number around and results in the same option number being processed again in a single packet. Certain options allocate memory by calling a memory allocation function. In the cases of COAP_OPTION_URI_QUERY, COAP_OPTION_URI_PATH, COAP_OPTION_LOCATION_QUERY, and COAP_OPTION_ETAG, there is no check on whether memory has already been allocated, which in conjunction with the option number integer overflow may lead to multiple assignments of allocated memory to a single pointer. This has been demonstrated to lead to memory leak by buffer orphaning. As a result, the memory is never freed.",7.5,"v3.1","High",0.01733,[],{"title":29,"metaDescription":30,"keywords":31,"structuredData":32},"Mbed-coap by Arm - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mbed-coap by Arm covering 1 version with 1 tracked vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Mbed-coap vulnerabilities, Mbed-coap security, Mbed-coap CVE, Arm Mbed-coap, Mbed-coap threat intelligence, Arm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":33,"@type":34,"name":35,"description":30,"url":36,"manufacturer":37,"applicationCategory":41,"softwareVersion":42,"mainEntity":43},"https:\u002F\u002Fschema.org","SoftwareApplication","Mbed-coap","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Farm\u002Fmbed-coap",{"@type":38,"name":39,"url":40},"Organization","Arm","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Farm","Security Software","1 versions tracked",{"@type":44,"name":45,"description":46,"vulnerabilityCount":9,"dateModified":11},"SecurityVulnerability","Mbed-coap Security Vulnerabilities","Security vulnerabilities affecting Mbed-coap by Arm",{"totalVersions":9,"totalVulnerabilities":9,"kevVulnerabilities":10,"lastUpdated":11,"generatedAt":48,"apiVersion":49},"2026-10-17T20:34:38.970Z","3.0",{"rows":51,"total":10,"capped":15,"failed":10},[],[]]