Read the docs

Apache

Records4054All Threatist records
Exploited (KEV)47In CISA KEV
CVSS critical776CVSS 9.0–10.0
CVSS high1543CVSS 7.0–8.9

Exploited now

Apache records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

9 records in Nuttx · all components

Priority MEDIUM 52

Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulnerabilities were discovered in Apache NuttX RTOS Bluetooth Stack (HCI and UART components) that may result in sy…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01614 Published 2025-05-26 Fixed in 12.9.0 CWE-119
Priority MEDIUM 50

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability was discovered in Apache NuttX RTOS apps/exapmles/xmlrpc application.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00741 Published 2025-06-16 Fixed in 12.9.0 CWE-119
Priority MEDIUM 47

Out-of-bounds Write vulnerability in TCP Stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying and invalid fragmentation offset value specified in…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0289 Published 2020-12-09 No fix listed CWE-787
TI-2020-01863 CVE-2020-1939 · GHSA-cxvf-qrfm-r86m

NULL pointer dereference in Apache NuttX

Priority MEDIUM 47

The Apache NuttX (Incubating) project provides an optional separate "apps" repository which contains various optional components and example programs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02559 Published 2020-05-12 No fix listed CWE-476
Priority MEDIUM 45

Out-of-bounds Write vulnerability in TCP stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying arbitrary urgent data pointer offsets within TCP pa…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03172 Published 2020-12-09 Fixed in 9.1.1 CWE-787
Priority MEDIUM 44

Use After Free vulnerability was discovered in fs/vfs/fs_rename code of the Apache NuttX RTOS, that due recursive implementation and single buffer use by two different pointer variables allowed arbitrary user provided si…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0157 Published 2026-01-01 Fixed in 12.11.0 CWE-416
Priority LOW 36

Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fs_inoderemove code of the Apache NuttX RTOS that allowed root filesystem inode removal leading to a debug assert trigger (that is disabled…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0079 Published 2026-01-01 Fixed in 12.10.0 CWE-763
Open these records in search →