CVE-2026-107837

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, receive in sys/net/gnrc/networklayer/sixlowpan/gnrcsixlowpan.c can route an undersized packet into SFF fragment handling after only a minimal payload...

CVE-2021-27697

RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrcrplvalidation.c through the gnrcrplvalidationoptions function...

CVE-2025-66646

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When receiving an fragmented IPv6 packe...

CVE-2021-27697

RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrcrplvalidation.c through the gnrcrplvalidationoptions function...

CVE-2021-27698

RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrcrplcontrolmessages.c through the parseoptions function...

CVE-2021-27357

RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrcrplcontrolmessages.c...

Buffer overflow

RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrcrplvalidation.c through the gnrcrplvalidationoptions function...

CVE-2021-27698

RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrcrplcontrolmessages.c through the parseoptions function...

CVE-2021-27698

RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrcrplcontrolmessages.c through the parseoptions function...

CVE-2021-27697

RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrcrplvalidation.c through the gnrcrplvalidationoptions function...

CVE-2021-27697

The connected records confirm a buffer overflow in RIOT-OS 2021.01, specifically in sys/net/gnrc/routing/rpl/gnrc_rpl_validation.c via gnrc_rpl_validation_options(). This is the documented root cause and function/file implicated across Red Hat, CNVD, NVD, and related sources. The CVE entry relate...

CVE-2021-27357

RIOT-OS 2020.01 is affected by CVE-2021-27357 due to a buffer overflow in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c. The connected documents confirm the vulnerable component and file path, but provide no public exploit details or remediation in the supplied content. CVSS metrics are s...

PT-2021-17607

Name of the Vulnerable Software and Affected Versions: RIOT-OS version 2021.01 Description: The issue is related to a buffer overflow in the parse options function, located in the /sys/net/gnrc/routing/rpl/gnrc rpl control messages.c file. Recommendations: For RIOT-OS version 2021.01, consider...

PT-2021-17606

Name of the Vulnerable Software and Affected Versions: RIOT-OS version 2021.01 Description: The issue is related to a buffer overflow in the sys/net/gnrc/routing/rpl/gnrc rpl validation.c file, specifically through the gnrc rpl validation options function. Recommendations: For RIOT-OS version...

CVE-2021-27697: Buffer Copy without Checking Size of Input

RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrcrplvalidation.c through the gnrcrplvalidationoptions function...

PT-2021-17411

Name of the Vulnerable Software and Affected Versions RIOT-OS version 2020.01 Description The issue is related to a buffer overflow in the /sys/net/gnrc/routing/rpl/gnrc rpl control messages.c file. Recommendations For RIOT-OS version 2020.01, consider applying a patch to fix the buffer overflow...

RIOT RIOT-OS security vulnerabilities

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. A buffer overflow vulnerability exists in /sys/net/gnrc/routing/rpl/gnrcrplcontrolmessages.c in RIOT version 2021.01. No detailed vulnerability details are provided a...

PT-2019-14334

Name of the Vulnerable Software and Affected Versions RIOT through 2019.07 Description The issue is related to the TCP implementation in RIOT, where the parser for TCP options does not properly terminate on all inputs. This can lead to a denial-of-service due to an infinite loop when encountering...

PT-2019-14005

Name of the Vulnerable Software and Affected Versions RIOT through 2019.07 Description The issue is related to a memory leak in the TCP implementation, specifically in the gnrc tcp module. This leak occurs when an ACK is received before a SYN, affecting the receive function in...