AR
Product
ArduinoCore-avr
by arduino · last CVE Sep 11, 2026
2
CVEs
0
On KEV
6.9
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch

Add ArduinoCore-avr to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-48490
6.9
1%
Sep 11
ArduinoCore-AVR: Stack-Based Buffer Overflow in String float/double concatenation handler
Affected: < 1.8.8
CVE-2025-69209
6.9
0%
Jan 21
ArduinoCore-avr has Stack-Based Buffer Overflow in WString Float/Double Constructors
Affected: < 1.8.7
Showing 2