URL: <https://savannah.nongnu.org/support/?111433>
Summary: VU#718602 - lwip
Group: Savannah Administration
Submitter: None
Submitted: Mon 13 Jul 2026 03:51:12 PM UTC
Category: Savannah trackers - bugs, tasks, etc.
Priority: 5 - Normal
Severity: 3 - Normal
Status: None
Privacy: Public
Assigned to: None
Originator Email: [email protected]
Operating System: None
Open/Closed: Open
Discussion Lock: Unlocked
_______________________________________________________
Follow-up Comments:
-------------------------------------------------------
Date: Mon 13 Jul 2026 03:51:12 PM UTC By: Anonymous
My name is Donaven and I am part of the Coordinated Vulnerability Disclosure
(CVD) team at the Cybersecurity and Infrastructure Security Agency (CISA).
I am reaching out to you because we have received a new report of a
vulnerability that affects the product, lwIP. According to research conducted
on who owns the lwip product, STMicroelectronics is that owner, and according
to the STMicroelectronics website these are the emails that handle
cybersecurity and vulnerability reports. If this is not the case please let me
know, so that I can find the correct contact information.
In the interest of coordinated disclosure (which aims to address
vulnerabilities before they can be exploited by attackers), we would like to
communicate this information to you.
To view the details associated with this case, please visit
https://kb.cert.org/vince/ and create an account on VINCE, which is our
coordination platform. Within VINCE, it is possible to view the original
vulnerability report. VINCE also facilitates direct communication with the
reporter, pending the reporter's willingness to communicate about the case.
Once you have created an account on VINCE please let me know what email you
used and I’ll get that account associated with the case.
If you have any questions about this process, please reach out to us. We look
forward to coordinating with you.
_______________________________________________________
Reply to this item at:
<https://savannah.nongnu.org/support/?111433>
_______________________________________________
Message sent via Savannah
https://savannah.nongnu.org/
signature.asc
Description: PGP signature
