Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

40 records

Priority HIGH 81

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00549 Published 2026-03-11 No fix listed CWE-787
Priority LOW 12

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices.

CVSS 4.0LOW 1.7 Network No auth No interaction EPSS 0.00971 Published 2025-12-17 Fixed in 2025.10 CWE-120
Priority LOW 37

RIOT-OS, an operating system that supports Internet of Things devices, has an ineffective size check implemented with `assert()` can lead to buffer overflow in versions up to and including 2025.04.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00861 Published 2025-07-18 No fix listed CWE-120
Priority HIGH 70

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00756 Published 2024-11-29 No fix listed CWE-835
Priority HIGH 82

RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01552 Published 2024-05-01 No fix listed CWE-120
Priority MEDIUM 43

RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.01301 Published 2024-05-01 No fix listed CWE-120
Priority HIGH 82

RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0148 Published 2023-05-30 No fix listed CWE-119
Priority HIGH 72

RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00707 Published 2023-05-30 No fix listed CWE-362
Priority MEDIUM 51

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00985 Published 2023-04-24 Fixed in 2022.10 CWE-787
Priority MEDIUM 40

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00859 Published 2023-04-24 Fixed in 2022.10 CWE-191
Priority HIGH 82

RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00985 Published 2023-04-24 Fixed in 2022.10 CWE-131
TI-2021-08916 CVE-2021-27427 · GHSA-xw8p-6vv6-4c5g

RIOT OS Integer Overflow or Wraparound

Priority MEDIUM 51

RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code in…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01675 Published 2022-05-03 No fix listed CWE-190
Load more