Priority LOW 23
RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rx_ringbuffer as a Serial V2 rt_serial_rx_fifo in _function_enable().
CVSS 4.0MEDIUM 5.1· Physical · No auth · No interaction · EPSS 0.00201 · Published 2026-10-12 · No fix listed CWE-843
Priority LOW 39
A vulnerability, which was classified as critical, was found in RT-Thread up to 5.1.0.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00296 · Published 2025-06-26 · No fix listed CWE-119
Priority LOW 39
A vulnerability, which was classified as critical, was found in RT-Thread 5.1.0.
CVSS 4.0HIGH 8.6· Adjacent network · Low privileges · No interaction · EPSS 0.00897 · Published 2025-06-09 · No fix listed CWE-119
Priority MEDIUM 42
A vulnerability, which was classified as critical, has been found in RT-Thread 5.1.0.
CVSS 4.0HIGH 8.6· Adjacent network · Low privileges · No interaction · EPSS 0.01146 · Published 2025-06-09 · No fix listed CWE-119
Priority MEDIUM 42
A vulnerability classified as critical was found in RT-Thread 5.1.0.
CVSS 4.0HIGH 8.6· Adjacent network · Low privileges · No interaction · EPSS 0.01214 · Published 2025-06-09 · No fix listed CWE-404
Priority HIGH 72
A vulnerability classified as critical has been found in RT-Thread 5.1.0.
CVSS 4.0HIGH 8.6· Adjacent network · Low privileges · No interaction · EPSS 0.00905 · Published 2025-06-09 · No fix listed CWE-119
Priority HIGH 72
A vulnerability was found in RT-Thread 5.1.0.
CVSS 4.0HIGH 8.6· Adjacent network · Low privileges · No interaction · EPSS 0.00962 · Published 2025-06-09 · No fix listed CWE-119
Priority MEDIUM 55
A vulnerability classified as problematic was found in RT-Thread up to 5.1.0.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00294 · Published 2025-02-08 · No fix listed CWE-200
Priority HIGH 73
A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01016 · Published 2024-03-27 · No fix listed CWE-120
Priority LOW 21
A buffer overflow occurs in utilities/ymodem/ry_sy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00642 · Published 2024-03-27 · No fix listed CWE-120
Priority MEDIUM 51
A stack buffer overflow occurs in net/at/src/at_server.c in RT-Thread through 5.0.2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01079 · Published 2024-03-27 · No fix listed CWE-121
Priority MEDIUM 60
An out-of-bounds access occurs in utilities/var_export/var_export.c in RT-Thread through 5.0.2.
CVSS 3.1MEDIUM 5.9· Local · No auth · No interaction · EPSS 0.00282 · Published 2024-03-27 · No fix listed CWE-125
Priority HIGH 72
A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00326 · Published 2024-03-27 · No fix listed CWE-121
Priority HIGH 72
A heap buffer overflow occurs in finsh/msh_file.c and finsh/msh.c in RT-Thread through 5.0.2.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00326 · Published 2024-03-27 · No fix listed CWE-122
Priority MEDIUM 40
RT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L * seed + 2531011L; return (seed >> 16) & 0x7FFF;" in calc_random in drivers/misc/rt_random.c.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00823 · Published 2024-03-27 · No fix listed CWE-338
Priority HIGH 72
drivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00326 · Published 2024-03-27 · No fix listed CWE-195
Priority HIGH 72
A heap buffer overflow occurs in the dfs_v2 romfs filesystem RT-Thread through 5.0.2.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00407 · Published 2024-03-27 · No fix listed CWE-122
Priority HIGH 72
A heap buffer overflow occurs in dfs_v2 dfs_file in RT-Thread through 5.0.2.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00407 · Published 2024-03-27 · No fix listed CWE-122
THREATIST.IORead the docs