# RIOT.

Every CVE that names RIOT among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [RIOT: DHCPv6 client \_parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read](https://agentprime.io/advisories/CVE-2026-49868.md)
  `CVE-2026-49868` · CVE record: RIOT-OS RIOT · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption
- [RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID](https://agentprime.io/advisories/CVE-2026-102693.md)
  `CVE-2026-102693` · CVE record: RIOT-OS RIOT · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption
- [RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access](https://agentprime.io/advisories/CVE-2026-102692.md)
  `CVE-2026-102692` · CVE record: RIOT-OS RIOT · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: Memory corruption
- [RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion](https://agentprime.io/advisories/CVE-2026-107838.md)
  `CVE-2026-107838` · CVE record: RIOT-OS RIOT · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service, CWE-252
- [RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling](https://agentprime.io/advisories/CVE-2026-107837.md)
  `CVE-2026-107837` · CVE record: RIOT-OS RIOT · CVSS 8.2 High · Not analysed yet · Published 9 Oct 2026 · Tags: Memory corruption
- [RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size](https://agentprime.io/advisories/CVE-2026-107836.md)
  `CVE-2026-107836` · CVE record: RIOT-OS RIOT · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Memory corruption
- [RIOT has an Out-of-Bounds Write in nanoCoAP Handler](https://agentprime.io/advisories/CVE-2026-27703.md)
  `CVE-2026-27703` · CVE record: RIOT-OS RIOT · CVSS 7.5 High · Not analysed yet · Published 11 Mar 2026 · Tags: Memory corruption
- [RIOT Vulnerable to Multiple Out-of-Bounds Read When Processing Received 6LoWPAN SFR Fragments](https://agentprime.io/advisories/CVE-2026-25139.md)
  `CVE-2026-25139` · CVE record: RIOT-OS RIOT · CVSS 8.7 High · Not analysed yet · Published 4 Feb 2026 · Tags: Memory corruption
- [RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass](https://agentprime.io/advisories/CVE-2025-66647.md)
  `CVE-2025-66647` · CVE record: RIOT-OS RIOT · CVSS 1.7 Low · Not analysed yet · Published 17 Dec 2025 · Tags: Memory corruption
- [RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reass](https://agentprime.io/advisories/CVE-2025-66646.md)
  `CVE-2025-66646` · CVE record: RIOT-OS RIOT · CVSS 1.7 Low · Not analysed yet · Published 17 Dec 2025 · Tags: Memory corruption
- [RIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link_layer/l2filter/l2filter.c](https://agentprime.io/advisories/CVE-2025-53888.md)
  `CVE-2025-53888` · CVE record: RIOT-OS RIOT · CVSS 6.6 Medium · Not analysed yet · Published 18 Jul 2025 · Tags: Memory corruption
- [Spoofed length byte traps CC2538 in endless loop](https://agentprime.io/advisories/CVE-2024-53980.md)
  `CVE-2024-53980` · CVE record: RIOT-OS RIOT · CVSS 6.9 Medium · Not analysed yet · Published 29 Nov 2024 · Tags: Denial of service
- [RIOT-OS missing dhcpv6_opt_t minimum header length check](https://agentprime.io/advisories/CVE-2024-52802.md)
  `CVE-2024-52802` · CVE record: RIOT-OS RIOT · CVSS 7.5 High · Not analysed yet · Published 22 Nov 2024 · Tags: Memory corruption, CWE-20
- [Ineffective size check due to assert() and buffer overflow in RIOT](https://agentprime.io/advisories/CVE-2024-32018.md)
  `CVE-2024-32018` · CVE record: RIOT-OS RIOT · CVSS 8.8 High · Not analysed yet · Published 1 May 2024 · Tags: Memory corruption
- [Buffer overflows in RIOT](https://agentprime.io/advisories/CVE-2024-32017.md)
  `CVE-2024-32017` · CVE record: RIOT-OS RIOT · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 May 2024 · Tags: Memory corruption
- [Lack of size check and buffer overflow in RIOT](https://agentprime.io/advisories/CVE-2024-31225.md)
  `CVE-2024-31225` · CVE record: RIOT-OS RIOT · CVSS 8.4 High · Not analysed yet · Published 1 May 2024 · Tags: Memory corruption
- [RIOT-OS vulnerable to Out of Bounds Write in \_rbuf_add](https://agentprime.io/advisories/CVE-2023-33975.md)
  `CVE-2023-33975` · CVE record: RIOT-OS RIOT · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 May 2023 · Tags: Memory corruption
- [RIOT-OS vulnerable to Race Condition in SFR Timeout](https://agentprime.io/advisories/CVE-2023-33974.md)
  `CVE-2023-33974` · CVE record: RIOT-OS RIOT · CVSS 7.5 High · Not analysed yet · Published 30 May 2023 · Tags: Race condition
- [RIOT-OS vulnerable to NULL pointer dereference during NHC encoding](https://agentprime.io/advisories/CVE-2023-33973.md)
  `CVE-2023-33973` · CVE record: RIOT-OS RIOT · CVSS 7.5 High · Not analysed yet · Published 30 May 2023 · Tags: Memory corruption
- [Usage of Uninitialized Timer during forwarding of Fragments with SFR](https://agentprime.io/advisories/CVE-2023-24826.md)
  `CVE-2023-24826` · CVE record: RIOT-OS RIOT · CVSS 5.9 Medium · Not analysed yet · Published 30 May 2023 · Tags: Memory corruption
- [RIOT-OS vulnerable to NULL pointer dereference in gnrc_pktbuf_mark](https://agentprime.io/advisories/CVE-2023-24825.md)
  `CVE-2023-24825` · CVE record: RIOT-OS RIOT · CVSS 7.5 High · Not analysed yet · Published 30 May 2023 · Tags: Memory corruption, CWE-252
- [RIOT-OS vulnerable to Out of Bounds write in routing with SRH](https://agentprime.io/advisories/CVE-2023-24817.md)
  `CVE-2023-24817` · CVE record: RIOT-OS RIOT · CVSS 7.5 High · Not analysed yet · Published 30 May 2023 · Tags: Memory corruption
- [RIOT-OS vulnerable to Packet Type Confusion during IPHC send](https://agentprime.io/advisories/CVE-2023-24823.md)
  `CVE-2023-24823` · CVE record: RIOT-OS RIOT · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Apr 2023 · Tags: Memory corruption
- [RIOT-OS vulnerable to Null Pointer dereference during IPHC encoding](https://agentprime.io/advisories/CVE-2023-24822.md)
  `CVE-2023-24822` · CVE record: RIOT-OS RIOT · CVSS 7.5 High · Not analysed yet · Published 24 Apr 2023 · Tags: Memory corruption
- [RIOT-OS vulnerable to Integer Underflow during defragmentation](https://agentprime.io/advisories/CVE-2023-24821.md)
  `CVE-2023-24821` · CVE record: RIOT-OS RIOT · CVSS 7.5 High · Not analysed yet · Published 24 Apr 2023 · Tags: Memory corruption
- [RIOT-OS vulnerable to Integer Underflow during IPHC receive](https://agentprime.io/advisories/CVE-2023-24820.md)
  `CVE-2023-24820` · CVE record: RIOT-OS RIOT · CVSS 7.5 High · Not analysed yet · Published 24 Apr 2023 · Tags: Memory corruption
- [RIOT-OS vulnerable to Buffer Overflow during IPHC receive](https://agentprime.io/advisories/CVE-2023-24819.md)
  `CVE-2023-24819` · CVE record: RIOT-OS RIOT · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Apr 2023 · Tags: Memory corruption
- [RIOT-OS vulnerable to null pointer dereference during fragment forwarding](https://agentprime.io/advisories/CVE-2023-24818.md)
  `CVE-2023-24818` · CVE record: RIOT-OS RIOT · CVSS 7.5 High · Not analysed yet · Published 24 Apr 2023 · Tags: Memory corruption

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=riot>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/riot/>. Everything for agents: <https://agentprime.io/llms.txt>.