CVE-2024-52802
RIOT-OS missing dhcpv6_opt_t minimum header length check
RIOT is an operating system for internet of things (IoT) devices. In version 2024.04 and prior, the function _parse_advertise, located in /sys/net/application_layer/dhcpv6/client.c, has no minimum header length check for dhcpv6_opt_t after processing dhcpv6_msg_t. This omission could lead to an out-of-bound read, causing system inconsistency. Additionally, the same lack of a header length check is present in the function _preparse_advertise, which is called by _parse_advertise before handling the request. As of time of publication, no known patched version exists.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
RIOT-OS missing dhcpv6_opt_t minimum header length check
RIOT is an operating system for internet of things (IoT) devices. In version 2024.04 and prior, the function _parse_advertise, located in /sys/net/application_layer/dhcpv6/client.c, has no minimum header length check for dhcpv6_opt_t after processing dhcpv6_msg_t. This omission could lead to an out-of-bound read, causing system inconsistency. Additionally, the same lack of a header length check is present in the function _preparse_advertise, which is called by _parse_advertise before handling the request. As of time of publication, no known patched version exists.
- Record
CVE-2024-52802- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20, CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2024-46055
RIOT is an operating system for internet of things (IoT) devices. In version 2024.04 and prior, the function _parse_advertise, located in /sys/net/application_layer/dhcpv6/client.c, has no minimum header length check for dhcpv6_opt_t after processing dhcpv6_msg_t. This omission could lead to an out-of-bound read, causing system inconsistency. Additionally, the same lack of a header length check is present in the function _preparse_advertise, which is called by _parse_advertise before handling the request. As of time of publication, no known patched version exists.
- Record
EUVD-2024-46055- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
NVD
RIOT is an operating system for internet of things (IoT) devices. In version 2024.04 and prior, the function _parse_advertise, located in /sys/net/application_layer/dhcpv6/client.c, has no minimum header length check for dhcpv6_opt_t after processing dhcpv6_msg_t. This omission could lead to an out-of-bound read, causing system inconsistency. Additionally, the same lack of a header length check is present in the function _preparse_advertise, which is called by _parse_advertise before handling the request. As of time of publication, no known patched version exists.
- Record
CVE-2024-52802- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20, CWE-125
- Updated
- 2026-11-02
OSV
RIOT-OS missing dhcpv6_opt_t minimum header length check
RIOT is an operating system for internet of things (IoT) devices. In version 2024.04 and prior, the function _parse_advertise, located in /sys/net/application_layer/dhcpv6/client.c, has no minimum header length check for dhcpv6_opt_t after processing dhcpv6_msg_t. This omission could lead to an out-of-bound read, causing system inconsistency. Additionally, the same lack of a header length check is present in the function _preparse_advertise, which is called by _parse_advertise before handling the request. As of time of publication, no known patched version exists.
- Record
CVE-2024-52802- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-125, CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-52802 is a high vulnerability (CVSS 7.5) in Riot-os Riot, published November 22, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.76%, the 55th percentile. No source names a fixed version.