Read the docs

TinyOS

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

TinyOS records in CISA KEV

No TinyOS vulnerabilities are listed in CISA KEV.

Records

2 records

Priority MEDIUM 56

TinyOS versions up to and including 2.1.2 contain a global buffer overflow vulnerability in the printfUART formatted output implementation used within the ZigBee / IEEE 802.15.4 networking stack.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00175 Published 2026-01-14 No fix listed CWE-787
Priority MEDIUM 55

TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in the mcp2200gpio utility.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.0014 Published 2026-01-12 No fix listed CWE-121
Open these records in search →