RIOT-OS

Records46All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical16CVSS 9.0–10.0

CVSS high23CVSS 7.0–8.9

Exploited now

RIOT-OS records in CISA KEV

No RIOT-OS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Riot 40 records HIGH

Records

46 records

TI-2024-21112 CVE-2024-32017

Buffer overflows in RIOT

HIGH 82

RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01552 Published 2024-05-01 No fix listed CWE-120

TI-2023-16843 CVE-2023-33975

RIOT-OS vulnerable to Out of Bounds Write in _rbuf_add

HIGH 82

RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0148 Published 2023-05-30 No fix listed CWE-119

TI-2023-10319 CVE-2023-24819

RIOT-OS vulnerable to Buffer Overflow during IPHC receive

HIGH 82

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00985 Published 2023-04-24 Fixed in 2022.10 CWE-131

TI-2026-22079 CVE-2026-27703

RIOT has an Out-of-Bounds Write in nanoCoAP Handler

HIGH 81

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00549 Published 2026-03-11 No fix listed CWE-787

TI-2023-16842 CVE-2023-33974

RIOT-OS vulnerable to Race Condition in SFR Timeout

HIGH 72

RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00707 Published 2023-05-30 No fix listed CWE-362

TI-2023-16841 CVE-2023-33973

RIOT-OS vulnerable to NULL pointer dereference during NHC encoding

HIGH 72

RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00963 Published 2023-05-30 No fix listed CWE-476

TI-2023-10325 CVE-2023-24825

RIOT-OS vulnerable to NULL pointer dereference in gnrc_pktbuf_mark

HIGH 72

RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00956 Published 2023-05-30 Fixed in 2023.04 CWE-252

TI-2023-10318 CVE-2023-24818

RIOT-OS vulnerable to null pointer dereference during fragment forwarding

HIGH 72

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01212 Published 2023-04-24 Fixed in 2022.10 CWE-476

TI-2023-10317 CVE-2023-24817

RIOT-OS vulnerable to Out of Bounds write in routing with SRH

HIGH 72

RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00635 Published 2023-05-30 Fixed in 2023.04 CWE-119

TI-2024-36139 CVE-2024-53980

Spoofed length byte traps CC2538 in endless loop

HIGH 70

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00756 Published 2024-11-29 No fix listed CWE-835

TI-2023-10326 CVE-2023-24826

Usage of Uninitialized Timer during forwarding of Fragments with SFR

HIGH 66

RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00832 Published 2023-05-30 Fixed in 2023.04 CWE-824

TI-2026-17824 CVE-2026-22214 · GHSA-rfq2-gv2r-vgjg

RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in ethos Serial Frame Parser

MEDIUM 63

RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in the ethos utility due to missing bounds checking when processing incoming serial frame data.

CVSS 4.0MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00464 Published 2026-01-12 No fix listed CWE-121

TI-2023-10323 CVE-2023-24823

RIOT-OS vulnerable to Packet Type Confusion during IPHC send

MEDIUM 51

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00985 Published 2023-04-24 Fixed in 2022.10 CWE-787

TI-2021-08916 CVE-2021-27427 · GHSA-xw8p-6vv6-4c5g

RIOT OS Integer Overflow or Wraparound

MEDIUM 51

RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code in…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01675 Published 2022-05-03 No fix listed CWE-190

TI-2026-17823 CVE-2026-22213 · GHSA-xjvw-vc5c-qgj5

RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in tapslip6 Utility

MEDIUM 46

RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in the tapslip6 utility.

CVSS 4.0LOW 2.4 Local Low privileges User interaction EPSS 0.00403 Published 2026-01-12 No fix listed CWE-121

TI-2026-75378 CVE-2026-102692

RIOT nanocoap Block2 overflow allows out-of-bounds memory access

MEDIUM 45

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0035 Published 2026-10-16 Fixed in 2026.07 CWE-190

TI-2021-09128 CVE-2021-27698 · GHSA-875q-xvh4-w483

RIOT-OS 2021.01 contains a buffer overflow vulnerability in…

MEDIUM 45

RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c through the _parse_options() function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01236 Published 2021-04-06 No fix listed CWE-120

TI-2021-09127 CVE-2021-27697 · GHSA-r2hp-m8f2-v2pc

RIOT-OS 2021.01 contains a buffer overflow vulnerability in…

MEDIUM 45

RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrc_rpl_validation.c through the gnrc_rpl_validation_options() function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01271 Published 2021-04-06 No fix listed CWE-120

TI-2021-08855 CVE-2021-27357 · GHSA-4xjg-p22c-hw39

RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c.

MEDIUM 45

RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01236 Published 2021-04-06 No fix listed CWE-120

TI-2020-12103 CVE-2020-15350 · GHSA-cw49-2735-59j9

RIOT 2020.04 has a buffer overflow in the base64 decoder.

MEDIUM 45

RIOT 2020.04 has a buffer overflow in the base64 decoder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01475 Published 2020-07-07 No fix listed CWE-119

TI-2019-15823 CVE-2019-1000006 · GHSA-gxcr-rf4j-phx3

RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a…

MEDIUM 45

RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sock_dns, an implementation of the DNS protocol utilizing the RIOT sock API that can result in Remote…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01552 Published 2019-02-04 No fix listed CWE-787

TI-2026-20301 CVE-2026-25139

RIOT Vulnerable to Multiple Out-of-Bounds Read When Processing Received 6LoWPAN SFR Fragments

MEDIUM 44

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00571 Published 2026-02-04 No fix listed CWE-125

TI-2024-21113 CVE-2024-32018

Ineffective size check due to assert() and buffer overflow in RIOT

MEDIUM 44

RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.01542 Published 2024-05-01 No fix listed CWE-120

TI-2026-75375 CVE-2026-49868

Out-of-bounds read in RIOT DHCPv6 client via missing length check

MEDIUM 43

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00371 Published 2026-10-16 Fixed in 2026.07 CWE-125

TI-2024-20601 CVE-2024-31225

Lack of size check and buffer overflow in RIOT

MEDIUM 43

RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.01301 Published 2024-05-01 No fix listed CWE-120

Open these records in search →

Critical	16
High	23
Medium	4
Low	3
No CVSS	0