ConnMan CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH ConnMan CVE published 2026-10-23

CVE-2026-115863

CVE-2026-115863 is a high-severity stack-based buffer overflow vulnerability in ConnMan through 2.0. The issue occurs in get_domains in gdhcp/client.c and can be triggered by a crafted DHCPv6 REPLY message with a DOMAIN_LIST option of >= 1025 non-zero bytes. This allows an on-link attacker to cause an unauthenticated crash of connmand, which runs as root, potentially disrupting network connectivity. Netwo [truncated]