Exposição de Riot

JavaScript frameworks
33
score de exposição
2.461
sites usam
0
em exploração
4
críticos
Análise Vexday

Com 22 CVEs catalogadas e nenhuma em exploração ativa confirmada pelo CISA KEV, o perfil de risco imediato de Riot se situa abaixo da média geral do catálogo, o que indica pressão ofensiva relativamente baixa no momento. Ainda assim, 4 vulnerabilidades de severidade crítica merecem atenção, e o tipo de falha mais frequente é CWE-787 (escrita fora dos limites de memória), categoria historicamente associada a impactos graves como execução remota de código. A CVE mais perigosa ativa no momento, CVE-2023-33975, apresenta EPSS de 0,0148, sugerindo probabilidade de exploração ainda contida, mas não negligenciável. A ausência de novas CVEs nos últimos 90 dias pode indicar estabilidade recente no volume de descobertas, embora não dispense o monitoramento contínuo das falhas críticas já conhecidas.

CVEs

22 resultados
CVE-2023-33975CRITICALRIOT-OS vulnerable to Out of Bounds Write in _rbuf_addEPSS 1.5%CVE-2024-32017CRITICALBuffer overflows in RIOTEPSS 1.5%CVE-2024-32018HIGHIneffective size check due to assert() and buffer overflow in RIOTEPSS 1.5%CVE-2024-31225HIGHLack of size check and buffer overflow in RIOTEPSS 1.2%CVE-2023-24818HIGHRIOT-OS vulnerable to null pointer dereference during fragment forwardingEPSS 1.2%CVE-2023-24819CRITICALRIOT-OS vulnerable to Buffer Overflow during IPHC receiveEPSS 1.0%CVE-2023-24823CRITICALRIOT-OS vulnerable to Packet Type Confusion during IPHC sendEPSS 1.0%CVE-2023-33973HIGHRIOT-OS vulnerable to NULL pointer dereference during NHC encodingEPSS 1.0%CVE-2023-24825HIGHRIOT-OS vulnerable to NULL pointer dereference in gnrc_pktbuf_markEPSS 1.0%CVE-2025-66647LOWRIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reassEPSS 0.9%CVE-2023-24822HIGHRIOT-OS vulnerable to Null Pointer dereference during IPHC encodingEPSS 0.9%CVE-2023-24821HIGHRIOT-OS vulnerable to Integer Underflow during defragmentationEPSS 0.9%CVE-2023-24820HIGHRIOT-OS vulnerable to Integer Underflow during IPHC receiveEPSS 0.9%CVE-2023-24826MEDIUMUsage of Uninitialized Timer during forwarding of Fragments with SFREPSS 0.8%CVE-2024-52802HIGHRIOT-OS missing dhcpv6_opt_t minimum header length checkEPSS 0.7%CVE-2024-53980MEDIUMSpoofed length byte traps CC2538 in endless loopEPSS 0.7%CVE-2025-53888MEDIUMRIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link_layer/l2filter/l2filter.cEPSS 0.7%CVE-2023-33974HIGHRIOT-OS vulnerable to Race Condition in SFR TimeoutEPSS 0.7%CVE-2023-24817HIGHRIOT-OS vulnerable to Out of Bounds write in routing with SRHEPSS 0.6%CVE-2025-66646LOWRIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reassEPSS 0.6%