Advisories · Technology
RIOT.
Every CVE that names RIOT among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read
- RIOT
- Memory corruption
- CVSS 9.6 CriticalCritical · CVSS 9+
RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID
- RIOT
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access
- RIOT
- Memory corruption
- CVSS 7.5 High
RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion
- RIOT
- Denial of service
- CWE-252
- CVSS 8.2 High
RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling
- RIOT
- Memory corruption
- CVSS 7.1 High
RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size
- RIOT
- Memory corruption
- CVSS 7.5 High
RIOT has an Out-of-Bounds Write in nanoCoAP Handler
- RIOT
- Memory corruption
- CVSS 8.7 High
RIOT Vulnerable to Multiple Out-of-Bounds Read When Processing Received 6LoWPAN SFR Fragments
- RIOT
- Memory corruption
- CVSS 1.7 Low
RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass
- RIOT
- Memory corruption
- CVSS 1.7 Low
RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reass
- RIOT
- Memory corruption
- CVSS 6.6 Medium
RIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link_layer/l2filter/l2filter.c
- RIOT
- Memory corruption
- CVSS 6.9 Medium
Spoofed length byte traps CC2538 in endless loop
- RIOT
- Denial of service
- CVSS 7.5 High
RIOT-OS missing dhcpv6_opt_t minimum header length check
- RIOT
- Memory corruption
- CWE-20
- CVSS 8.8 High
Ineffective size check due to assert() and buffer overflow in RIOT
- RIOT
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Buffer overflows in RIOT
- RIOT
- Memory corruption
- CVSS 8.4 High
Lack of size check and buffer overflow in RIOT
- RIOT
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
RIOT-OS vulnerable to Out of Bounds Write in _rbuf_add
- RIOT
- Memory corruption
- CVSS 7.5 High
RIOT-OS vulnerable to Race Condition in SFR Timeout
- RIOT
- Race condition
- CVSS 7.5 High
RIOT-OS vulnerable to NULL pointer dereference during NHC encoding
- RIOT
- Memory corruption
- CVSS 5.9 Medium
Usage of Uninitialized Timer during forwarding of Fragments with SFR
- RIOT
- Memory corruption
- CVSS 7.5 High
RIOT-OS vulnerable to NULL pointer dereference in gnrc_pktbuf_mark
- RIOT
- Memory corruption
- CWE-252
- CVSS 7.5 High
RIOT-OS vulnerable to Out of Bounds write in routing with SRH
- RIOT
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
RIOT-OS vulnerable to Packet Type Confusion during IPHC send
- RIOT
- Memory corruption
- CVSS 7.5 High
RIOT-OS vulnerable to Null Pointer dereference during IPHC encoding
- RIOT
- Memory corruption
- CVSS 7.5 High
RIOT-OS vulnerable to Integer Underflow during defragmentation
- RIOT
- Memory corruption
- CVSS 7.5 High
RIOT-OS vulnerable to Integer Underflow during IPHC receive
- RIOT
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
RIOT-OS vulnerable to Buffer Overflow during IPHC receive
- RIOT
- Memory corruption
- CVSS 7.5 High
RIOT-OS vulnerable to null pointer dereference during fragment forwarding
- RIOT
- Memory corruption