CVE-2026-25139

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. In version 2025.10 and prior, multiple out-of-bounds read allow any unauthenticated user, with ability to send or manipulate input packets, to...

CVE-2026-25139

RIOT OS vulnerable to multiple out-of-bounds reads in 6LoWPAN processing for version 2025.10 and prior. An unauthenticated attacker who can send/manipulate input packets can read adjacent memory or crash the device because the received packet is cast into a sixlowpan_sfr_rfrag_t struct and derefe...

PT-2026-6269

Name of the Vulnerable Software and Affected Versions RIOT versions 2025.10 and prior Description The RIOT operating system, designed for IoT and embedded devices, contains an issue where out-of-bounds read operations can occur. An unauthenticated user capable of sending or manipulating input...