CVE-2024-52802

RIOT is an operating system for internet of things IoT devices. In version 2024.04 and prior, the function "parseadvertise", located in "/sys/net/applicationlayer/dhcpv6/client.c", has no minimum header length check for "dhcpv6optt" after processing "dhcpv6msgt". This omission could lead to an...