A critical use-after-free vulnerability in the libcoap library could lead to application crashes or arbitrary code execution.

This is a memory management flaw occurring in the coap_delete_pdu_lkd function. Improper handling of PDU object memory after it has been freed creates a use-after-free condition, which can be triggered by specifically crafted network packets.

This vulnerability carries a CVSS score of 9.8, indicating a critical risk of remote code execution. Successful exploitation could allow an attacker to gain control over the affected system, resulting in total system compromise, unauthorized data access, or persistent service disruption.

Immediate Action: Upgrade to the latest version of the libcoap library containing the necessary memory management fixes.

Proactive Monitoring: Monitor system logs for memory access violations or unexpected process crashes that may indicate an exploitation attempt.

Compensating Controls: If immediate patching is not possible, implement network-level access controls to restrict traffic to the affected service, limiting the attack surface.

Public Exploit Available: Not specified

The extreme severity of this use-after-free vulnerability requires an immediate update to the libcoap library. Security teams should prioritize patching this library across all environments to prevent potential remote exploitation of the underlying system.