5761 matches found
RT-Thread 安全漏洞
RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from a buffer overflow vulnerability that stems from the dfsv2 romfs file failing to properly validate the length size of input data, which can be exploited by remote attackers to execute...
RT-Thread 安全漏洞
RT-Thread is an open source IoT real-time operating system RTOS from RT-Thread Open Source. A security vulnerability exists in RT-Thread version 5.0.2, which stems from an incorrect sprintf call or a missing "" character, resulting in a buffer overflow...
CVE-2024-25391
A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2...
CVE-2024-25391
A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2...
CVE-2024-24335
A heap buffer overflow occurs in the dfsv2 romfs filesystem RT-Thread through 5.0.2...
CVE-2024-25392
An out-of-bounds access occurs in utilities/varexport/varexport.c in RT-Thread through 5.0.2...
CVE-2024-25394
A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...
CVE-2024-25395
A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2...
CVE-2024-25390
A heap buffer overflow occurs in finsh/mshfile.c and finsh/msh.c in RT-Thread through 5.0.2...
CVE-2024-25391
A stack buffer overflow vulnerability exists in the RT-Thread real-time operating system (RTOS) in versions through 5.0.2 . The flaw is located specifically in the libc/posix/ipc/mqueue.c file. The vulnerability was identified in the POSIX IPC message queue implementation. As of the provided docu...
CVE-2024-25395
The RT-Thread RTOS (an open source IoT real-time operating system) is affected by a buffer overflow vulnerability in the utilities/rt-link/src/rtlink.c file. This issue impacts versions through 5.0.2 and is caused by a buffer-based overflow during processing. The technical details indicate that t...
CVE-2024-25390
A heap buffer overflow vulnerability exists in the RT-Thread open-source IoT real-time operating system (RTOS) in versions through 5.0.2 . The flaw is located in the finsh/msh_file.c and finsh/msh.c components. To resolve this issue, users are recommended to update to a version later than 5.0.2 ....
CVE-2024-25389: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
RT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L seed + 2531011L; return seed 16 & 0x7FFF;" in calcrandom in drivers/misc/rtrandom.c...
CVE-2024-25395: Buffer Copy without Checking Size of Input
A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2...
CVE-2024-25388: Signed to Unsigned Conversion Error
drivers/wlan/wlanmgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow...
RT-Thread 安全漏洞
RT-Thread is an open source IoT real-time operating system RTOS from RT-Thread Open Source. A security vulnerability exists in RT-Thread version 5.0.2, which stems from a stack-based buffer overflow in libc/posix/ipc/mqueue.c. The vulnerability is caused by the presence of a stack-based buffer...
RT-Thread 安全漏洞
RT-Thread is an open source IoT real-time operating system RTOS from RT-Thread Open Source. A security vulnerability exists in RT-Thread version 5.0.2, which stems from a heap-based buffer overflow in drivers/wlan/wlanmgmt.c. The vulnerability is caused by the presence of a heap-based buffer...
CVE-2024-25394
A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...