Vulnerabilidades em RIOT-OS
28 resultadosAnálise Vexday
RIOT-OS apresenta 22 vulnerabilidades catalogadas, sendo 4 críticas, com predominância de buffer overflows (CWE-787) que denotam questões estruturais no tratamento de memória. Não há registros de exploração ativa em campo (KEV) e a base não apresenta divulgações recentes, sugerindo risco contido no curto prazo, mas vulnerabilidades estruturais que exigem remediação sistemática.
CVE-2026-25139HIGHRIOT Vulnerable to Multiple Out-of-Bounds Read When Processing Received 6LoWPAN SFR FragmentsEPSS 0.6%CVE-2026-27703HIGHRIOT has an Out-of-Bounds Write in nanoCoAP HandlerEPSS 0.5%CVE-2026-107837HIGHRIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment HandlingEPSS 0.4%CVE-2026-49868CRITICALRIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap readEPSS 0.4%CVE-2026-102692CRITICALRIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory accessEPSS 0.4%CVE-2026-107838HIGHRIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertionEPSS 0.3%CVE-2026-107836HIGHRIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block sizeEPSS 0.3%CVE-2026-102693CRITICALRIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSIDEPSS 0.2%