5476 matches found
CVE-2024-25389
RT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L seed + 2531011L; return seed 16 & 0x7FFF;" in calcrandom in drivers/misc/rtrandom.c...
CVE-2024-25390
A heap buffer overflow occurs in finsh/mshfile.c and finsh/msh.c in RT-Thread through 5.0.2...
CVE-2024-25391
A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2...
CVE-2024-25394
A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...
CVE-2024-25393
A stack buffer overflow occurs in net/at/src/atserver.c in RT-Thread through 5.0.2...
RT-Thread 安全漏洞
RT-Thread is an open source IoT real-time operating system RTOS from RT-Thread Open Source. A security vulnerability exists in RT-Thread version 5.0.2, which stems from a heap-based buffer overflow in finsh/mshfile.c and finsh/msh.c. The vulnerability is caused by the presence of a heap-based...
RT-Thread 安全漏洞
RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from a buffer overflow vulnerability that stems from net/at/src/atserver.c failing to properly validate the length size of input data, which can be exploited by remote attackers to execute...
RT-Thread 安全漏洞
RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. A security vulnerability exists in RT-Thread version 5.0.2, which stems from the calcrandom method in drivers/misc/rtrandom.c that uses a weak algorithm to generate random numbers...
CVE-2024-25389
RT-Thread versions through 5.0.2 are vulnerable to a weak random number generation algorithm in the calc_random function located in drivers/misc/rt_random.c. The algorithm uses a predictable formula: seed = 214013L * seed + 2531011L; return (seed >> 16) & 0x7FFF;, which can lead to the gene...
CVE-2024-25394
A buffer overflow vulnerability exists in the RT-Thread open source IoT real-time operating system (RTOS) through version 5.0.2 . The flaw is located in the utilities/ymodem/ry_sy.c component and is caused by an incorrect sprintf call or a missing null character (�) . This vulnerability could lea...
CVE-2024-25390: Heap-based Buffer Overflow
A heap buffer overflow occurs in finsh/mshfile.c and finsh/msh.c in RT-Thread through 5.0.2...
CVE-2024-25392: Out-of-bounds Read
An out-of-bounds access occurs in utilities/varexport/varexport.c in RT-Thread through 5.0.2...
CVE-2024-24335
The RT-Thread open-source IoT real-time operating system (RTOS) contains a heap buffer overflow vulnerability in the dfs_v2 romfs filesystem. The root cause is a failure to properly validate the length size of input data. This vulnerability affects RT-Thread versions 5.0.2 and earlier . If succes...
CVE-2024-25392
An out-of-bounds access occurs in utilities/varexport/varexport.c in RT-Thread through 5.0.2...
CVE-2024-25393
A stack buffer overflow occurs in net/at/src/atserver.c in RT-Thread through 5.0.2...
CVE-2024-25388
drivers/wlan/wlanmgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow...
CVE-2024-24335
A heap buffer overflow occurs in the dfsv2 romfs filesystem RT-Thread through 5.0.2...
CVE-2024-24334
A heap buffer overflow occurs in dfsv2 dfsfile in RT-Thread through 5.0.2...
