Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-49868
  • github.com/riot-os/riot
RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to... 16 Oct
  • Fix available
  • Severity - 9.8 (Critical)
CVE-2026-102693
  • github.com/riot-os/riot
RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID 16 Oct
  • Fix available
  • Severity - 9.6 (Critical)
CVE-2026-102692
  • github.com/riot-os/riot
RIOT: Potential integer overflow in nanocoap Block2 handling leading to... 16 Oct
  • Fix available
  • Severity - 9.1 (Critical)
CVE-2026-107838
  • github.com/riot-os/riot
RIOT: nanocoap_fileserver ignores response initialization failure, leading to... 09 Oct
  • Fix available
  • Severity - 7.5 (High)
CVE-2026-107837
  • github.com/riot-os/riot
RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling 09 Oct
  • Fix available
  • Severity - 8.2 (High)
CVE-2026-107836
  • github.com/riot-os/riot
RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent... 09 Oct
  • Fix available
  • Severity - 7.1 (High)
CVE-2026-27703
  • github.com/riot-os/riot
RIOT has an Out-of-Bounds Write in nanoCoAP Handler 11 Mar
  • No fix available
  • Severity - 7.5 (High)
CVE-2026-25139
  • github.com/riot-os/riot
RIOT Vulnerable to Multiple Out-of-Bounds Read When Processing Received 6LoWPAN... 04 Feb
  • No fix available
  • Severity - 8.7 (High)
CVE-2025-66647
  • github.com/riot-os/riot
RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass 17 Dec 2025
  • Fix available
  • Severity - 1.7 (Low)
CVE-2025-66646
  • github.com/riot-os/riot
RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reass 17 Dec 2025
  • Fix available
  • Severity - 1.7 (Low)
CVE-2025-53888
  • github.com/riot-os/riot
RIOT-OS has an ineffective size check that can lead to buffer overflow in link... 18 Jul 2025
  • Fix available
  • Severity - 6.6 (Medium)
CVE-2024-53980
  • github.com/riot-os/riot
Spoofed length byte traps CC2538 in endless loop 29 Nov 2024
  • No fix available
  • Severity - 6.9 (Medium)
CVE-2024-52802
  • github.com/riot-os/riot
RIOT-OS missing dhcpv6_opt_t minimum header length check 22 Nov 2024
  • No fix available
  • Severity - 7.5 (High)
CVE-2024-32018
  • github.com/riot-os/riot
Ineffective size check due to assert() and buffer overflow in RIOT 01 May 2024
  • No fix available
  • Severity - 8.8 (High)
CVE-2024-32017
  • github.com/riot-os/riot
Buffer overflows in RIOT 01 May 2024
  • No fix available
  • Severity - 9.8 (Critical)
CVE-2024-31225
  • github.com/riot-os/riot
Lack of size check and buffer overflow in RIOT 01 May 2024
  • No fix available
  • Severity - 8.3 (High)