CVE-2026-14629: medium-severity vulnerability in RT-Thread
RT-Thread Parameter lwp_syscall.c sys_ioctl divide by zero
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 5.3epss 0.5%
A flaw has been found in RT-Thread up to 5.2.2. Affected is the function read/write/sys_ioctl of the file components/lwp/lwp_syscall.c of the component Parameter Handler. Executing a manipulation can lead to divide by zero. The attack may be launched remotely. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
n/a · RT-Threadpublic PoCs found — 1
cve_referencegithub.com/RT-Thread/rt-thread/issues/11429unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.