CVE-2024-25388

RT-Thread versions through 5.0.2 are vulnerable to a heap-based buffer overflow in the drivers/wlan/wlan_mgmt.c component. The flaw is caused by an integer signedness error (specifically a signed to unsigned conversion error). This vulnerability could lead to high impact on confidentiality, integ...

CVE-2024-25390

A heap buffer overflow occurs in finsh/mshfile.c and finsh/msh.c in RT-Thread through 5.0.2...

CVE-2024-24335

A heap buffer overflow occurs in the dfsv2 romfs filesystem RT-Thread through 5.0.2...

CVE-2024-25394: Buffer Copy without Checking Size of Input

A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...

CVE-2024-25395

A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2...

CVE-2024-25390

A heap buffer overflow occurs in finsh/mshfile.c and finsh/msh.c in RT-Thread through 5.0.2...

PT-2024-20368 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions 5.0.2 and earlier Description: A heap buffer overflow occurs in the dfs v2 romfs filesystem. Recommendations: For RT-Thread versions 5.0.2 and earlier, at the moment, there is no information about a newer version that...

PT-2024-20916 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: A stack buffer overflow occurs in the libc/posix/ipc/mqueue.c file. Recommendations: For RT-Thread versions through 5.0.2, at the moment, there is no information about a newer version that contain...

PT-2024-20367 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: A heap buffer overflow occurs in dfs v2 dfs file in RT-Thread. Recommendations: For RT-Thread versions through 5.0.2, at the moment, there is no information about a newer version that contains a f...

PT-2024-20912 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: The issue is related to an integer signedness error and resultant buffer overflow in the drivers/wlan/wlan mgmt,c component. Recommendations: For RT-Thread versions through 5.0.2, update to a...

PT-2024-20918 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: A stack buffer overflow occurs in the net/at/src/at server.c file. Recommendations: For RT-Thread versions through 5.0.2, update to a version that contains a fix for this issue...

PT-2024-20920 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: A buffer overflow occurs in the utilities/rt-link/src/rtlink.c file. Recommendations: For RT-Thread versions through 5.0.2, update to a version that contains a fix for this issue. At the moment,...

PT-2024-20917 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: An out-of-bounds access occurs in utilities/var export/var export.c. Recommendations: For RT-Thread versions through 5.0.2, update to a version that fixes the out-of-bounds access issue in...

PT-2024-20913 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: The issue is related to a weak random number generation algorithm used in RT-Thread. The algorithm, defined as seed = 214013L seed + 2531011L; return seed 16 & 0x7FFF;, is implemented in the calc...

PT-2024-20915 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: A heap buffer overflow occurs in finsh/msh file.c and finsh/msh.c. Recommendations: For RT-Thread versions through 5.0.2, update to a version later than 5.0.2 to resolve the issue...

PT-2024-20919 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: A buffer overflow occurs in utilities/ymodem/ry sy.c because of an incorrect sprintf call or a missing '0' character. Recommendations: For versions through 5.0.2, update to a version that fixes th...