High
Security advisory
In LoRaMac-node before 4.4.4, a reception buffer overflow can happen due to the received buffer size not being checked. This has been fixed in 4.4.4.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-11068
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:32 UTC · Revision 1
Source evidence
In LoRaMac-node before 4.4.4, a reception buffer overflow can happen due to the received buffer size not being checked. This has been fixed in 4.4.4.
osv:CVE-2020-11068
Complete source record
{
"id": "d63a9a1ed19e6c7f432a0e3ce5dbaf87f7cc56cdc8cf0830b1e146ea7953d7cb",
"url": "https://osv.dev/vulnerability/CVE-2020-11068",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-11068",
"summary": "In LoRaMac-node before 4.4.4, a reception buffer overflow can happen due to the received buffer size not being checked. This has been fixed in 4.4.4.",
"evidence": "osv:CVE-2020-11068",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2020-11068",
"aliases": [
"CVE-2020-11068",
"GHSA-559p-6xgm-fpv9"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/lora-net/loramac-node",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "ba17382bd5109513937afad07f068a781a503ef6"
},
{
"fixed": "e3063a91daa7ad8a687223efa63079f0c24568e4"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:semtech:loramac-node:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "4.4.4"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "e3063a91daa7ad8a687223efa63079f0c24568e4"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"v4.4.3",
"v4.4.2",
"v4.4.2-rc.7",
"v4.4.2-rc.6",
"v4.4.2-rc.5",
"4.4.2-rc.4",
"v4.4.2-rc.3",
"v4.4.2-rc.2",
"v4.4.2-rc.1",
"v4.0.0",
"v4.3.0",
"v4.2.0",
"v4.1.0",
"v3.4.1",
"V3.4",
"v3.3",
"v3.2",
"v3.1",
"v3.0",
"v2.3.RC2",
"v2.3.RC1",
"v2.2",
"v2.1",
"v2.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-11068.json",
"vanir_signatures": [
{
"id": "CVE-2020-11068-06e3ddf5",
"digest": {
"threshold": 0.9,
"line_hashes": [
"217943513229331974053177570341904374095",
"158229748252261799029226800678054978975",
"257417098436523763359627050287874618484",
"25502565422967047204298405231183211323",
"65784995682968914060774190354734000253",
"227905730767439064633267358346307995013",
"10271869559989751747744332288236947360",
"92088805706696705966372640674638221742"
]
},
"source": "https://github.com/lora-net/loramac-node/commit/e3063a91daa7ad8a687223efa63079f0c24568e4",
"target": {
"file": "src/mac/LoRaMac.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-11068-11dd77fd",
"digest": {
"threshold": 0.9,
"line_hashes": [
"187279422351008881163045226212769455854",
"334431603000567321990112645809611874811",
"149712001136221002528868900505496561655"
]
},
"source": "https://github.com/lora-net/loramac-node/commit/e3063a91daa7ad8a687223efa63079f0c24568e4",
"target": {
"file": "src/peripherals/atecc608a-tnglora-se/atecc608a-tnglora-se.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-11068-681c59fd",
"digest": {
"length": 9734,
"function_hash": "77552535904026823327571985916187162076"
},
"source": "https://github.com/lora-net/loramac-node/commit/e3063a91daa7ad8a687223efa63079f0c24568e4",
"target": {
"file": "src/mac/LoRaMac.c",
"function": "ProcessRadioRxDone"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-11068-6aa9e653",
"digest": {
"threshold": 0.9,
"line_hashes": [
"187279422351008881163045226212769455854",
"334431603000567321990112645809611874811",
"149712001136221002528868900505496561655"
]
},
"source": "https://github.com/lora-net/loramac-node/commit/e3063a91daa7ad8a687223efa63079f0c24568e4",
"target": {
"file": "src/peripherals/lr1110-se/lr1110-se.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-11068-988d2ca2",
"digest": {
"length": 1954,
"function_hash": "104639005086380311500882123505189001892"
},
"source": "https://github.com/lora-net/loramac-node/commit/e3063a91daa7ad8a687223efa63079f0c24568e4",
"target": {
"file": "src/peripherals/soft-se/soft-se.c",
"function": "SecureElementProcessJoinAccept"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-11068-9b512c72",
"digest": {
"length": 1324,
"function_hash": "2985876363264467897231117159574642002"
},
"source": "https://github.com/lora-net/loramac-node/commit/e3063a91daa7ad8a687223efa63079f0c24568e4",
"target": {
"file": "src/peripherals/lr1110-se/lr1110-se.c",
"function": "SecureElementProcessJoinAccept"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-11068-b1007c0a",
"digest": {
"threshold": 0.9,
"line_hashes": [
"187279422351008881163045226212769455854",
"334431603000567321990112645809611874811",
"149712001136221002528868900505496561655"
]
},
"source": "https://github.com/lora-net/loramac-node/commit/e3063a91daa7ad8a687223efa63079f0c24568e4",
"target": {
"file": "src/peripherals/soft-se/soft-se.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2020-11068-df0f7ad0",
"digest": {
"length": 1954,
"function_hash": "104639005086380311500882123505189001892"
},
"source": "https://github.com/lora-net/loramac-node/commit/e3063a91daa7ad8a687223efa63079f0c24568e4",
"target": {
"file": "src/peripherals/atecc608a-tnglora-se/atecc608a-tnglora-se.c",
"function": "SecureElementProcessJoinAccept"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:46:33Z"
}
}
],
"modified": "2026-10-20T13:46:33.515326671Z",
"provider": "osv",
"references": [
"https://github.com/Lora-net/LoRaMac-node/commit/e3063a91daa7ad8a687223efa63079f0c24568e4",
"https://github.com/Lora-net/LoRaMac-node/security/advisories/GHSA-559p-6xgm-fpv9"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2020-11068",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388222,
"published_at": "2020-06-23T17:15:11.5+00:00"
}