Login Request a demo
RI
Vendor
RIOT-OS
1 product with CVEs on record
46
CVEs
0
On KEV
6
New 30D
Products
RI
RIOT
RIOT-OS
9.8
46 CVEs0 on KEV6 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-49868
RI
RIOT
RIOT-OS
9.8
0%
Oct 16RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read
CVE-2026-102693
RI
RIOT
RIOT-OS
9.6
0%
Oct 16RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID
CVE-2026-102692
RI
RIOT
RIOT-OS
9.1
0%
Oct 16RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access
CVE-2026-107838
RI
RIOT
RIOT-OS
7.5
0%
Oct 9RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion
CVE-2026-107837
RI
RIOT
RIOT-OS
8.2
0%
Oct 9RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling
CVE-2026-107836
RI
RIOT
RIOT-OS
7.1
0%
Oct 9RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size
CVE-2026-27703
RI
RIOT
RIOT-OS
9.8
1%
Mar 11RIOT has an Out-of-Bounds Write in nanoCoAP Handler
CVE-2026-25139
RI
RIOT
RIOT-OS
9.1
1%
Feb 4RIOT Vulnerable to Multiple Out-of-Bounds Read When Processing Received 6LoWPAN SFR Fragments
CVE-2026-22214
RI
Riot
Riot-os
9.8
0%
Jan 12RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in ethos Serial Frame Parser
CVE-2026-22213
RI
Riot
Riot-os
9.8
0%
Jan 12RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in tapslip6 Utility
CVE-2025-66647
RI
RIOT
RIOT-OS
9.8
1%
Dec 17RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass
CVE-2025-66646
RI
RIOT
RIOT-OS
7.5
1%
Dec 17RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reass
CVE-2025-53888
RI
RIOT
RIOT-OS
9.8
1%
Jul 18RIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link_layer/l2filter/l2filter.c
CVE-2024-53980
RI
RIOT
RIOT-OS
7.5
1%
Nov 29Spoofed length byte traps CC2538 in endless loop
CVE-2024-52802
RI
RIOT
RIOT-OS
7.5
1%
Nov 22RIOT-OS missing dhcpv6_opt_t minimum header length check
CVE-2024-32018
RI
Riot
Riot-os
9.0
2%
May 1RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers
CVE-2024-32017
RI
Riot
Riot-os
9.0
2%
May 1RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers
CVE-2024-31225
RI
Riot
Riot-os
9.0
1%
May 1RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers
CVE-2023-33975
RI
Riot
Riot-os
9.8
1%
May 30RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames
CVE-2023-33974
RI
Riot
Riot-os
5.9
1%
May 30RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames
CVE-2023-33973
RI
Riot
Riot-os
7.5
1%
May 30RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames
CVE-2023-24826
RI
Riot
Riot-os
7.5
1%
May 30RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames
CVE-2023-24825
RI
Riot
Riot-os
7.5
1%
May 30RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames
CVE-2023-24817
RI
Riot
Riot-os
7.5
1%
May 30RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames
CVE-2023-24823
RI
Riot
Riot-os
9.8
1%
Apr 24RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames
CVE-2023-24822
RI
Riot
Riot-os
7.5
1%
Apr 24RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames
CVE-2023-24821
RI
Riot
Riot-os
7.5
1%
Apr 24RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames
CVE-2023-24820
RI
Riot
Riot-os
7.5
1%
Apr 24RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames
CVE-2023-24819
RI
Riot
Riot-os
9.8
1%
Apr 24RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames
CVE-2023-24818
RI
Riot
Riot-os
7.5
1%
Apr 24RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames
CVE-2021-27427
RI
Riot
Riot-os
9.8
2%
May 3RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected…
CVE-2021-41061
RI
Riot
Riot-os
5.5
0%
Sep 15In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154_security component allows attackers to break encryption by triggering reboots
CVE-2021-31664
RI
Riot
Riot-os
7.5
1%
Jun 18RIOT-OS 2021.01 before commit 44741ff99f7a71df45420635b238b9c22093647a contains a buffer overflow which could allow attackers to obtain sensitive information
CVE-2021-31663
RI
Riot
Riot-os
7.5
2%
Jun 18RIOT-OS 2021.01 before commit bc59d60be60dfc0a05def57d74985371e4f22d79 contains a buffer overflow which could allow attackers to obtain sensitive information
CVE-2021-31662
RI
Riot
Riot-os
7.5
1%
Jun 18RIOT-OS 2021.01 before commit 07f1254d8537497552e7dce80364aaead9266bbe contains a buffer overflow which could allow attackers to obtain sensitive information
CVE-2021-31661
RI
Riot
Riot-os
7.5
1%
Jun 18RIOT-OS 2021.01 before commit 609c9ada34da5546cffb632a98b7ba157c112658 contains a buffer overflow that could allow attackers to obtain sensitive information
CVE-2021-31660
RI
Riot
Riot-os
7.5
1%
Jun 18RIOT-OS 2021.01 before commit 85da504d2dc30188b89f44c3276fc5a25b31251f contains a buffer overflow which could allow attackers to obtain sensitive information
CVE-2021-27698
RI
Riot
Riot-os
9.8
1%
Apr 6RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c through the _parse_options() function
CVE-2021-27697
RI
Riot
Riot-os
9.8
1%
Apr 6RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrc_rpl_validation.c through the gnrc_rpl_validation_options() function
CVE-2021-27357
RI
Riot
Riot-os
9.8
1%
Apr 6RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c
CVE-2020-15350
RI
Riot
Riot-os
9.8
1%
Jul 7RIOT 2020.04 has a buffer overflow in the base64 decoder
CVE-2019-17389
RI
Riot
Riot-os
7.5
1%
Oct 9In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP socket
CVE-2019-16754
RI
Riot
Riot-os
7.5
1%
Sep 24RIOT 2019.07 contains a NULL pointer dereference in the MQTT-SN implementation (asymcute), potentially allowing an attacker to crash a network node running RIOT
CVE-2019-15702
RI
Riot
Riot-os
7.5
1%
Aug 27In the TCP implementation (gnrc_tcp) in RIOT through 2019.07, the parser for TCP options does not terminate on all inputs, allowing a denial-of-service, because…
CVE-2019-15134
RI
Riot
Riot-os
7.5
2%
Aug 17RIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an attacker to consume all memory available for network packets and thus effectively…
CVE-2019-1000006
RI
Riot
Riot-os
9.8
2%
Feb 4RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sock_dns, an implementation of the DNS protocol utilizing…