agentprime: riotEvery new CVE for riot.https://agentprime.io/CVE-2026-49868: RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap readhttps://agentprime.io/advisories/CVE-2026-49868/https://agentprime.io/advisories/CVE-2026-49868/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 16:50:58 GMTCVEcriticalCVE-2026-102693: RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSIDhttps://agentprime.io/advisories/CVE-2026-102693/https://agentprime.io/advisories/CVE-2026-102693/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 16:49:45 GMTCVEcriticalCVE-2026-102692: RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory accesshttps://agentprime.io/advisories/CVE-2026-102692/https://agentprime.io/advisories/CVE-2026-102692/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 16:48:35 GMTCVEcriticalCVE-2026-107838: RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertionhttps://agentprime.io/advisories/CVE-2026-107838/https://agentprime.io/advisories/CVE-2026-107838/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 17:55:34 GMTCVECVE-2026-107837: RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handlinghttps://agentprime.io/advisories/CVE-2026-107837/https://agentprime.io/advisories/CVE-2026-107837/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 17:53:47 GMTCVECVE-2026-107836: RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block sizehttps://agentprime.io/advisories/CVE-2026-107836/https://agentprime.io/advisories/CVE-2026-107836/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 17:49:41 GMTCVECVE-2026-27703: RIOT has an Out-of-Bounds Write in nanoCoAP Handlerhttps://agentprime.io/advisories/CVE-2026-27703/https://agentprime.io/advisories/CVE-2026-27703/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 19:38:02 GMTCVECVE-2026-25139: RIOT Vulnerable to Multiple Out-of-Bounds Read When Processing Received 6LoWPAN SFR Fragmentshttps://agentprime.io/advisories/CVE-2026-25139/https://agentprime.io/advisories/CVE-2026-25139/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Feb 2026 17:47:00 GMTCVECVE-2025-66647: RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reasshttps://agentprime.io/advisories/CVE-2025-66647/https://agentprime.io/advisories/CVE-2025-66647/CVSS 1.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Dec 2025 20:21:13 GMTCVECVE-2025-66646: RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reasshttps://agentprime.io/advisories/CVE-2025-66646/https://agentprime.io/advisories/CVE-2025-66646/CVSS 1.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Dec 2025 19:18:08 GMTCVECVE-2025-53888: RIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link_layer/l2filter/l2filter.chttps://agentprime.io/advisories/CVE-2025-53888/https://agentprime.io/advisories/CVE-2025-53888/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Jul 2025 15:32:15 GMTCVECVE-2024-53980: Spoofed length byte traps CC2538 in endless loophttps://agentprime.io/advisories/CVE-2024-53980/https://agentprime.io/advisories/CVE-2024-53980/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Nov 2024 18:56:57 GMTCVECVE-2024-52802: RIOT-OS missing dhcpv6_opt_t minimum header length checkhttps://agentprime.io/advisories/CVE-2024-52802/https://agentprime.io/advisories/CVE-2024-52802/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Nov 2024 15:41:29 GMTCVECVE-2024-32018: Ineffective size check due to assert() and buffer overflow in RIOThttps://agentprime.io/advisories/CVE-2024-32018/https://agentprime.io/advisories/CVE-2024-32018/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 May 2024 06:14:03 GMTCVECVE-2024-32017: Buffer overflows in RIOThttps://agentprime.io/advisories/CVE-2024-32017/https://agentprime.io/advisories/CVE-2024-32017/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 May 2024 06:14:01 GMTCVEcriticalCVE-2024-31225: Lack of size check and buffer overflow in RIOThttps://agentprime.io/advisories/CVE-2024-31225/https://agentprime.io/advisories/CVE-2024-31225/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 May 2024 06:13:58 GMTCVECVE-2023-33975: RIOT-OS vulnerable to Out of Bounds Write in _rbuf_addhttps://agentprime.io/advisories/CVE-2023-33975/https://agentprime.io/advisories/CVE-2023-33975/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 May 2023 17:08:41 GMTCVEcriticalCVE-2023-33974: RIOT-OS vulnerable to Race Condition in SFR Timeouthttps://agentprime.io/advisories/CVE-2023-33974/https://agentprime.io/advisories/CVE-2023-33974/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 May 2023 16:50:06 GMTCVECVE-2023-33973: RIOT-OS vulnerable to NULL pointer dereference during NHC encodinghttps://agentprime.io/advisories/CVE-2023-33973/https://agentprime.io/advisories/CVE-2023-33973/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 May 2023 16:18:04 GMTCVECVE-2023-24826: Usage of Uninitialized Timer during forwarding of Fragments with SFRhttps://agentprime.io/advisories/CVE-2023-24826/https://agentprime.io/advisories/CVE-2023-24826/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 May 2023 16:07:45 GMTCVECVE-2023-24825: RIOT-OS vulnerable to NULL pointer dereference in gnrc_pktbuf_markhttps://agentprime.io/advisories/CVE-2023-24825/https://agentprime.io/advisories/CVE-2023-24825/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 May 2023 15:54:49 GMTCVECVE-2023-24817: RIOT-OS vulnerable to Out of Bounds write in routing with SRHhttps://agentprime.io/advisories/CVE-2023-24817/https://agentprime.io/advisories/CVE-2023-24817/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 May 2023 15:50:54 GMTCVECVE-2023-24823: RIOT-OS vulnerable to Packet Type Confusion during IPHC sendhttps://agentprime.io/advisories/CVE-2023-24823/https://agentprime.io/advisories/CVE-2023-24823/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Apr 2023 15:27:55 GMTCVEcriticalCVE-2023-24822: RIOT-OS vulnerable to Null Pointer dereference during IPHC encodinghttps://agentprime.io/advisories/CVE-2023-24822/https://agentprime.io/advisories/CVE-2023-24822/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Apr 2023 15:24:26 GMTCVECVE-2023-24821: RIOT-OS vulnerable to Integer Underflow during defragmentationhttps://agentprime.io/advisories/CVE-2023-24821/https://agentprime.io/advisories/CVE-2023-24821/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Apr 2023 15:11:47 GMTCVECVE-2023-24820: RIOT-OS vulnerable to Integer Underflow during IPHC receivehttps://agentprime.io/advisories/CVE-2023-24820/https://agentprime.io/advisories/CVE-2023-24820/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Apr 2023 14:59:43 GMTCVECVE-2023-24819: RIOT-OS vulnerable to Buffer Overflow during IPHC receivehttps://agentprime.io/advisories/CVE-2023-24819/https://agentprime.io/advisories/CVE-2023-24819/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Apr 2023 14:42:44 GMTCVEcriticalCVE-2023-24818: RIOT-OS vulnerable to null pointer dereference during fragment forwardinghttps://agentprime.io/advisories/CVE-2023-24818/https://agentprime.io/advisories/CVE-2023-24818/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Apr 2023 14:23:44 GMTCVE