Skip to main content
SecMate

Unseen. Until SecMate.

Unknown vulnerabilities in critical software. Found. Reported.

+0
Findings reported
0
Organizations
0%
Responsibly disclosed

Disclosed.

obgm · libcoap — Static Buffer Overflow in Address Resolution
SECMATE-2025-0001·CVE-2025-34468
8.2
obgm · libcoap — Out-of-Bounds Read in OSCORE Parsing
SECMATE-2025-0002·CVE-2025-59391
6.5
NASA · CryptoLib — Heap Buffer Overflow in MariaDB SA Hexstring Conversion
SECMATE-2025-0003·CVE-2026-22027
5.7
NASA · CryptoLib — Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion
SECMATE-2025-0004·CVE-2026-22026
8.2
NASA · CryptoLib — Memory Leak on HTTP Error Response in KMC Client
SECMATE-2025-0005·CVE-2026-22025
6.3
NASA · CryptoLib — Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion
SECMATE-2025-0006·CVE-2026-22024
6.3
NASA · CryptoLib — Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern
SECMATE-2025-0007·CVE-2026-22023
8.2
NASA · CryptoLib — Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern
SECMATE-2025-0008·CVE-2026-21900
8.2
RustFS · RustFS — RustFS gRPC GetMetrics deserialization panic enables remote DoS
SECMATE-2025-0009·CVE-2025-69255
5.5
RustFS · RustFS — SourceIp bypass via spoofed X-Forwarded-For/Real-IP headers
SECMATE-2025-0010·CVE-2026-21862
7.7
LFEnergy - EVerest · everest-core — Out-of-bounds read in DZG_GSH01 SLIP CRC parser can crash powermeter driver
SECMATE-2025-0011·CVE-2025-68132
2.4
Arduino · ArduinoCore-avr — Stack-Based Buffer Overflow in Floating-Point to String Conversion
SECMATE-2025-0012·CVE-2025-69209
6.9
Espressif · ESP-IDF — Use-After-Free in BLE Provisioning Transport
SECMATE-2025-0013·CVE-2026-25507
6.3
Espressif · ESP-IDF — Out-of-Bounds Read in BLE ATT Prepare Write Handling
SECMATE-2025-0014·CVE-2026-25508
6.3
Golioth · Firmware SDK — Payload Utils Stack-Based Buffer Overflow
SECMATE-2025-0015·CVE-2026-23747
6.3
Golioth · Firmware SDK — LightDB State Out-of-Bounds Read via Integer Underflow
SECMATE-2025-0016·CVE-2026-23748
6.3
Golioth · Firmware SDK — Blockwise Transfer Path Out-of-Bounds Read
SECMATE-2025-0017·CVE-2026-23749
2.1
Golioth · Pouch — BLE GATT Heap-Based Buffer Overflow in Certificate Handling
SECMATE-2025-0018·CVE-2026-23750
7.2
Renesas · FSP — RSA Signature Verification Pointer Underflow
SECMATE-2025-0019
Renesas · FSP — AES-XTS Buffer Overflow in MbedTLS Hardware Path
SECMATE-2025-0020
Renesas · FSP — RMAC Read Buffer Overflow
SECMATE-2025-0021
Renesas · FSP — GCM Tag Length Stack Buffer Overflow in MbedTLS
SECMATE-2025-0022
Renesas · FSP — CCM Tag Length Stack Buffer Overflow in MbedTLS
SECMATE-2025-0023
Renesas · FSP — CCM MAC Length Stack Buffer Overflow in MbedTLS
SECMATE-2025-0024
Renesas · MCUBoot — Serial Recovery Stack Buffer Overflow in MCUBoot
SECMATE-2025-0025

Under responsible disclosure.

Renesas
NASA
Espressif
Bosch
PX4
SiliconLabs
Golioth
Tianocore
Intel
Zephyr Project
Rustfs
libcoap
EVerest
TypeORM
Arduino

Vendors listed here have been privately notified of potential security issues under a coordinated disclosure process. No technical details are published, and inclusion does not imply confirmed vulnerabilities, severity, exploitability, or negligence.

What's hidden in yours?

Find out