CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
RIOT OS ethos Utility Stack-based Buffer Overflow Vulnerability (CVE-2026-22214) Security Advisory
[Affected Scope] ethos utility in RIOT OS versions up to and including 2026.01-devel-317
[Impact] Unauthenticated remote attackers can send crafted serial or TCP-framed input to corrupt memory, leading to application crashes or potential arbitrary code execution
[Mitigation] Apply the latest source code patches, or manually implement bounds checking in the ethos utility's frame parser and rebuild
RIOT OS tapslip6 Utility Stack-based Buffer Overflow Vulnerability (CVE-2026-22213) Security Advisory
[Affected Scope] RIOT OS versions up to and including 2026.01-devel-317 containing the tapslip6 utility
[Impact] Attackers can trigger a stack buffer overflow via crafted command-line arguments, leading to process crashes and potential arbitrary code execution
[Mitigation] Apply the latest source patches, replace unsafe string functions with snprintf, and restrict execution permissions on the tapslip6 binary