TI-2026-35852 CVE-2026-48490
ArduinoCore-AVR: Stack-Based Buffer Overflow in String float/double concatenation handler
Priority LOW 38
ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform.
arduino
Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
arduino records in CISA KEVNo arduino vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records
TI-2023-23493 CVE-2023-43802 · GHSA-75j7-w798-cwwx
Path traversal in Arduino Create Agent
Priority LOW 34
Arduino Create Agent is a package to help manage Arduino development.
TI-2023-23491 CVE-2023-43800 · GHSA-4x5q-q7wc-q22p
Insufficient Verification of Data Authenticity in Arduino Create Agent
Priority LOW 33
Arduino Create Agent is a package to help manage Arduino development.
TI-2026-20963 CVE-2026-25933
Arduino App Lab has Improper Data Validation in Internal Terminal Interface
Priority LOW 32
Arduino App Lab is a cross-platform IDE for developing Arduino Apps.
TI-2023-23494 CVE-2023-43803 · GHSA-m5jc-r4gf-c6p8
Path traversal in Arduino Create Agent
Priority LOW 31
Arduino Create Agent is a package to help manage Arduino development.
TI-2023-23492 CVE-2023-43801 · GHSA-mjq6-pv9c-qppq
Path traversal in Arduino Create Agent
Priority LOW 31
Arduino Create Agent is a package to help manage Arduino development.
TI-2025-42663 CVE-2025-69209
ArduinoCore-avr has Stack-Based Buffer Overflow in WString Float/Double Constructors
Priority LOW 30
ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform.
TI-2019-10437 CVE-2019-13991 · GHSA-589h-8jj7-3j6m
Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs…
Priority LOW 30
Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs (directly connected to GPIO pins) via a laser, because of LED photosensitivity.
Priority LOW 28
The Arduino Create Agent allows users to use the Arduino Create applications to upload code to any USB connected Arduino board directly from the browser.
Priority LOW 21
Arduino IDE is an integrated development environment.
Priority LOW 21
Arduino IDE is an integrated development environment.
TI-2025-20417 CVE-2025-27608
Self Cross-Site Scripting in Arduino IDE
Priority LOW 6
Arduino IDE 2.x is an IDE based on the Theia IDE framework and built with Electron.