CVE-2024-31225

RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. The "onrdinit" function does not implement a size check before copying data to the "resultbuf" static buffer. If an attacker can craft a long enough...

CVE-2024-31225

The CVE-2024-31225 entry concerns RIOT OS. The issue is in the _on_rd_init() function, which does not perform a size check before copying data to the _result_buf static buffer, enabling a potential buffer overflow if an attacker crafts a sufficiently long payload. Impact is described as potential...

CVE-2024-31225: Buffer Copy without Checking Size of Input

RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. The onrdinit function does not implement a size check before copying data to the resultbuf static buffer. If an attacker can craft a long enough...