Skip to content

Arduino vulnerabilities

Products

Newest

arduino arduinocore-avr ArduinoCore-AVR: Stack-Based Buffer Overflow in String float/double concatenation handler CVE-2026-48490 6.9 MediumSeptember 11, 2026
arduino app lab, arduino-app-lab +1 more Arduino App Lab has Improper Data Validation in Internal Terminal Interface CVE-2026-25933 6.9 MediumFebruary 12, 2026
arduino arduinocore-avr ArduinoCore-avr has Stack-Based Buffer Overflow in WString Float/Double Constructors CVE-2025-69209 Fix available 6.9 MediumJanuary 21, 2026
arduino ide, arduino-ide +1 more Arduino IDE for macOS has Insecure File Permissions CVE-2025-64724 4.8 MediumDecember 18, 2025
arduino ide, arduino-ide +1 more Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection CVE-2025-64723 4.8 MediumDecember 18, 2025
arduino arduino-ide Self Cross-Site Scripting in Arduino IDE CVE-2025-27608 1.0 LowApril 2, 2025
arduino core, espressif arduino-esp32 +1 more Multiple Poisoned Pipeline Execution (PPE) vulnerabilities CVE-2024-45798 Public exploit 10.0 CriticalSeptember 17, 2024
arduino create agent, arduino-create-agent +1 more Arduino Create Agent vulnerable to Reflected Cross-Site Scripting CVE-2023-49296 6.3 MediumDecember 13, 2023
arduino create agent, arduino-create-agent +1 more Path traversal in Arduino Create Agent CVE-2023-43803 Fix available 6.1 MediumOctober 18, 2023
arduino create agent, arduino-create-agent +1 more Path traversal in Arduino Create Agent CVE-2023-43802 Fix available 7.1 HighOctober 18, 2023
arduino create agent, arduino-create-agent +1 more Path traversal in Arduino Create Agent CVE-2023-43801 Fix available 6.1 MediumOctober 18, 2023
arduino create agent, arduino-create-agent +1 more Insufficient Verification of Data Authenticity in Arduino Create Agent CVE-2023-43800 Fix available 7.3 HighOctober 18, 2023
arduino firmware Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs ... CVE-2019-13991 6.5 MediumJuly 19, 2019