RI
Product
RIOT
46
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 21High 23Medium 2Low 0
Watch
Add RIOT to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-49868 | 9.8 | Oct 16 | RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read Affected: < 2026.07 |
| CVE-2026-27703 | 9.8 | Mar 11 | RIOT has an Out-of-Bounds Write in nanoCoAP Handler Affected: <= 2026.01 |
| CVE-2026-22214 | 9.8 | Jan 12 | RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in ethos Serial Frame Parser Affected: before 2025.10; 2026.01; 2026.01 |
| CVE-2026-22213 | 9.8 | Jan 12 | RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in tapslip6 Utility Affected: before 2025.10; 2026.01; 2026.01 |
| CVE-2025-66647 | 9.8 | Dec 17 | RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass Affected: < 2025.10 |
| CVE-2025-53888 | 9.8 | Jul 18 | RIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link_layer/l2filter/l2filter.c Affected: <= 2025.04 |
| CVE-2023-33975 | 9.8 | May 30 | RIOT-OS vulnerable to Out of Bounds Write in _rbuf_add Affected: <= 2023.01 |
| CVE-2023-24823 | 9.8 | Apr 24 | RIOT-OS vulnerable to Packet Type Confusion during IPHC send Affected: < 2022.10 |
| CVE-2023-24819 | 9.8 | Apr 24 | RIOT-OS vulnerable to Buffer Overflow during IPHC receive Affected: < 2022.10 |
| CVE-2021-27427 | 9.8 | May 3 | RIOT OS Integer Overflow or Wraparound Affected: 2020.01.1 |
| CVE-2021-27698 | 9.8 | Apr 6 | RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c through the _parse_options() function Affected: 2021.01 |
| CVE-2021-27697 | 9.8 | Apr 6 | RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrc_rpl_validation.c through the gnrc_rpl_validation_options() function Affected: 2021.01 |
| CVE-2021-27357 | 9.8 | Apr 6 | RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c Affected: 2021.01 |
| CVE-2020-15350 | 9.8 | Jul 7 | RIOT 2020.04 has a buffer overflow in the base64 decoder Affected: 2020.04 |
| CVE-2019-1000006 | 9.8 | Feb 4 | RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sock_dns, an implementation of the DNS protocol utilizing… Affected: 2017.04 before 2018.10.1 |
| CVE-2026-102693 | 9.6 | Oct 16 | RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID Affected: < 2026.04 |
| CVE-2026-102692 | 9.1 | Oct 16 | RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access Affected: < 2026.07 |
| CVE-2026-25139 | 9.1 | Feb 4 | RIOT Vulnerable to Multiple Out-of-Bounds Read When Processing Received 6LoWPAN SFR Fragments Affected: <= 2025.10 |
| CVE-2024-32018 | 9.0 | May 1 | Ineffective size check due to assert() and buffer overflow in RIOT Affected: <= 2023.10 |
| CVE-2024-32017 | 9.0 | May 1 | Buffer overflows in RIOT Affected: <= 2023.10 |
| CVE-2024-31225 | 9.0 | May 1 | Lack of size check and buffer overflow in RIOT Affected: <= 2023.10 |
Showing 21