196 matches found
RT-Thread 安全漏洞
RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from a buffer overflow vulnerability that stems from the dfsv2 romfs file failing to properly validate the length size of input data, which can be exploited by remote attackers to execute...
CVE-2024-25391
A stack buffer overflow vulnerability exists in the RT-Thread RTOS (an open-source IoT real-time operating system) affecting versions through 5.0.2 . The flaw is located in the libc/posix/ipc/mqueue.c file. This vulnerability allows for potential memory corruption due to improper handling of data...
RT-Thread 安全漏洞
RT-Thread is an open source IoT real-time operating system RTOS from RT-Thread Open Source. A security vulnerability exists in RT-Thread version 5.0.2, which stems from a heap-based buffer overflow in drivers/wlan/wlanmgmt.c. The vulnerability is caused by the presence of a heap-based buffer...
CVE-2024-25391
A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2...
CVE-2024-25391: Stack-based Buffer Overflow
A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2...
CVE-2024-25390
A heap buffer overflow occurs in finsh/mshfile.c and finsh/msh.c in RT-Thread through 5.0.2...
RT-Thread 安全漏洞
RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from a buffer overflow vulnerability that stems from dfsv2 dfsfile failing to properly validate the length size of input data, which can be exploited by a remote attacker to execute...
CVE-2024-25395
A buffer overflow vulnerability exists in the RT-Thread real-time operating system (RTOS) in versions through 5.0.2 . The flaw is located in the utilities/rt-link/src/rtlink.c file, specifically caused by a buffer copy without checking the size of the input (CWE-120 ). This vulnerability could al...
CVE-2024-25394
A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...
CVE-2024-25393: Stack-based Buffer Overflow
A stack buffer overflow occurs in net/at/src/atserver.c in RT-Thread through 5.0.2...
CVE-2024-24334: Heap-based Buffer Overflow
A heap buffer overflow occurs in dfsv2 dfsfile in RT-Thread through 5.0.2...
CVE-2024-25394: Buffer Copy without Checking Size of Input
A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...
CVE-2024-25390
A heap buffer overflow occurs in finsh/mshfile.c and finsh/msh.c in RT-Thread through 5.0.2...
CVE-2024-25394
A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...
CVE-2024-24334
A heap buffer overflow occurs in dfsv2 dfsfile in RT-Thread through 5.0.2...
CVE-2024-25392
An out-of-bounds access occurs in utilities/varexport/varexport.c in RT-Thread through 5.0.2...
CVE-2024-24335
A heap buffer overflow occurs in the dfsv2 romfs filesystem RT-Thread through 5.0.2...
CVE-2024-24334
The RT-Thread open-source IoT real-time operating system (RTOS) is vulnerable to a heap buffer overflow in the dfs_v2 dfs_file function (versions through 5.0.2). The root cause is a failure to properly validate the length size of input data . A remote attacker could exploit this to execute arbitr...
CVE-2024-25388
RT-Thread versions through 5.0.2 are vulnerable to a heap-based buffer overflow in the drivers/wlan/wlan_mgmt.c component. The flaw is caused by an integer signedness error (specifically a signed to unsigned conversion error). This vulnerability could lead to high impact on confidentiality, integ...