Riot-os vulnerabilities

Products

• Riot 46

Newest

• riot-os riot RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read CVE-2026-49868 9.8 CriticalOctober 16, 2026
• riot-os riot RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID CVE-2026-102693 9.6 CriticalOctober 16, 2026
• riot-os riot RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access CVE-2026-102692 9.1 CriticalOctober 16, 2026
• riot-os riot RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion CVE-2026-107838 7.5 HighOctober 9, 2026
• riot-os riot RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling CVE-2026-107837 8.2 HighOctober 9, 2026
• riot-os riot RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size CVE-2026-107836 7.1 HighOctober 9, 2026
• riot-os riot RIOT has an Out-of-Bounds Write in nanoCoAP Handler CVE-2026-27703 7.5 HighMarch 11, 2026
• riot-os riot RIOT Vulnerable to Multiple Out-of-Bounds Read When Processing Received 6LoWPAN SFR Fragments CVE-2026-25139 8.7 HighFebruary 4, 2026
• riot os, riot-os riot +1 more RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in ethos Serial Frame Parser CVE-2026-22214 6.8 MediumJanuary 12, 2026
• riot os, riot-os riot +1 more RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in tapslip6 Utility CVE-2026-22213 2.4 LowJanuary 12, 2026
• riot-os riot RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass CVE-2025-66647 1.7 LowDecember 17, 2025
• riot-os riot RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reass CVE-2025-66646 1.7 LowDecember 17, 2025
• riot-os riot RIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link_layer/l2filter/l2filter.c CVE-2025-53888 6.6 MediumJuly 18, 2025
• riot-os riot Spoofed length byte traps CC2538 in endless loop CVE-2024-53980 6.9 MediumNovember 29, 2024
• riot-os riot RIOT-OS missing dhcpv6_opt_t minimum header length check CVE-2024-52802 7.5 HighNovember 22, 2024
• riot-os riot Ineffective size check due to assert() and buffer overflow in RIOT CVE-2024-32018 8.8 HighMay 1, 2024
• riot-os riot Buffer overflows in RIOT CVE-2024-32017 9.8 CriticalMay 1, 2024
• riot-os riot Lack of size check and buffer overflow in RIOT CVE-2024-31225 8.4 HighMay 1, 2024
• riot-os riot RIOT-OS vulnerable to Out of Bounds Write in _rbuf_add CVE-2023-33975 9.8 CriticalMay 30, 2023
• riot-os riot RIOT-OS vulnerable to Race Condition in SFR Timeout CVE-2023-33974 7.5 HighMay 30, 2023
• riot-os riot RIOT-OS vulnerable to NULL pointer dereference during NHC encoding CVE-2023-33973 7.5 HighMay 30, 2023
• riot-os riot Usage of Uninitialized Timer during forwarding of Fragments with SFR CVE-2023-24826 5.9 MediumMay 30, 2023
• riot-os riot RIOT-OS vulnerable to NULL pointer dereference in gnrc_pktbuf_mark CVE-2023-24825 7.5 HighMay 30, 2023
• riot-os riot RIOT-OS vulnerable to Out of Bounds write in routing with SRH CVE-2023-24817 7.5 HighMay 30, 2023
• riot-os riot RIOT-OS vulnerable to Packet Type Confusion during IPHC send CVE-2023-24823 9.8 CriticalApril 24, 2023
• riot-os riot RIOT-OS vulnerable to Null Pointer dereference during IPHC encoding CVE-2023-24822 7.5 HighApril 24, 2023
• riot-os riot RIOT-OS vulnerable to Integer Underflow during defragmentation CVE-2023-24821 7.5 HighApril 24, 2023
• riot-os riot RIOT-OS vulnerable to Integer Underflow during IPHC receive CVE-2023-24820 7.5 HighApril 24, 2023
• riot-os riot RIOT-OS vulnerable to Buffer Overflow during IPHC receive CVE-2023-24819 9.8 CriticalApril 24, 2023
• riot-os riot RIOT-OS vulnerable to null pointer dereference during fragment forwarding CVE-2023-24818 7.5 HighApril 24, 2023
• riot os, riot-os riot +1 more RIOT OS Integer Overflow or Wraparound CVE-2021-27427 7.3 HighMay 3, 2022
• riot-os riot In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154_security component... CVE-2021-41061 5.5 MediumSeptember 15, 2021
• riot-os riot RIOT-OS 2021.01 before commit 85da504d2dc30188b89f44c3276fc5a25b31251f contains a buffer overflow... CVE-2021-31660 7.5 HighJune 18, 2021
• riot-os riot RIOT-OS 2021.01 before commit 609c9ada34da5546cffb632a98b7ba157c112658 contains a buffer overflow... CVE-2021-31661 7.5 HighJune 18, 2021
• riot-os riot RIOT-OS 2021.01 before commit 07f1254d8537497552e7dce80364aaead9266bbe contains a buffer overflow... CVE-2021-31662 7.5 HighJune 18, 2021
• riot-os riot RIOT-OS 2021.01 before commit bc59d60be60dfc0a05def57d74985371e4f22d79 contains a buffer overflow... CVE-2021-31663 7.5 HighJune 18, 2021
• riot-os riot RIOT-OS 2021.01 before commit 44741ff99f7a71df45420635b238b9c22093647a contains a buffer overflow... CVE-2021-31664 7.5 HighJune 18, 2021
• riot-os riot RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl... CVE-2021-27698 9.8 CriticalApril 6, 2021
• riot-os riot RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl... CVE-2021-27697 9.8 CriticalApril 6, 2021
• riot-os riot RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl... CVE-2021-27357 9.8 CriticalApril 6, 2021
• riot-os riot RIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64_decode()... CVE-2020-15350 9.8 CriticalJuly 7, 2020
• riot-os riot In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read... CVE-2019-17389 7.5 HighOctober 9, 2019
• riot-os riot RIOT 2019.07 contains a NULL pointer dereference in the MQTT-SN implementation (asymcute),... CVE-2019-16754 7.5 HighSeptember 24, 2019
• riot-os riot In the TCP implementation (gnrc_tcp) in RIOT through 2019.07, the parser for TCP options does not... CVE-2019-15702 7.5 HighAugust 27, 2019
• riot-os riot RIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an... CVE-2019-15134 7.5 HighAugust 17, 2019
• riot-os riot RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer... CVE-2019-1000006 9.8 CriticalFebruary 4, 2019