CVE-2024-25391

CVE-2024-25391 affects RT-Thread RTOS up to version 5.0.2, with a stack-based buffer overflow in libc/posix/ipc/mqueue.c. The CVE description from multiple sources confirms the issue is a stack overflow in that file, reported as a local-attack surface with high impact (confidentiality/integrity/a...

CVE-2024-25395

Summary: CVE-2024-25395 affects RT-Thread RTOS, specifically the utilities/rt-link/src/rtlink.c module, where a buffer overflow exists in versions up to and including 5.0.2. Affected software/component: RT-Thread (RTOS); vulnerable file: utilities/rt-link/src/rtlink.c. Root cause / vulnerability ...

CVE-2024-24335

A heap buffer overflow occurs in the dfsv2 romfs filesystem RT-Thread through 5.0.2...

CVE-2024-25391

A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2...

CVE-2024-25392

An out-of-bounds access occurs in utilities/varexport/varexport.c in RT-Thread through 5.0.2...

PT-2024-11914 · Flash Cgi · Mini Thread

Name of the Vulnerable Software and Affected Versions: Mini Thread provided by Flash CGI affected versions not specified Description: The issue concerns a cross-site scripting problem. There is no information about the estimated number of potentially affected devices worldwide or real-world...

CVE-2024-25395

A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2...

CVE-2024-25390

A heap buffer overflow occurs in finsh/mshfile.c and finsh/msh.c in RT-Thread through 5.0.2...

CVE-2024-24334

A heap buffer overflow occurs in dfsv2 dfsfile in RT-Thread through 5.0.2...

RT-Thread 安全漏洞

RT-Thread is an open source IoT real-time operating system RTOS from RT-Thread Open Source. A security vulnerability exists in RT-Thread version 5.0.2, which stems from an out-of-bounds access in utilities/varexport/varexport.c. The vulnerability is caused by an out-of-bounds access in...

CVE-2024-24334

RT-Thread suffers a heap buffer overflow in dfs_v2 dfs_file (through version 5.0.2). The issue arises from improper validation of input data length in the dfs_v2/dfs_file path, enabling memory corruption that can lead to code execution or a denial of service. Affected software: RT-Thread RTOS; vu...

CVE-2024-25388

RT-Thread vulnerability CVE-2024-25388 affects the wlan_mgmt,c driver in RT-Thread up to version 5.0.2. The issue is an integer signedness error that enables a heap/buffer overflow. Affected component: drivers/wlan/wlan_mgmt,c. The impact is a buffer overflow as stated in multiple sources. Remedi...

CVE-2024-24334

A heap buffer overflow occurs in dfsv2 dfsfile in RT-Thread through 5.0.2...

CVE-2024-25388

drivers/wlan/wlanmgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow...

CVE-2024-25394

A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...

CVE-2024-25389

RT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L seed + 2531011L; return seed 16 & 0x7FFF;" in calcrandom in drivers/misc/rtrandom.c...

CVE-2024-25390

A heap buffer overflow occurs in finsh/mshfile.c and finsh/msh.c in RT-Thread through 5.0.2...

CVE-2024-25392

An out-of-bounds access occurs in utilities/varexport/varexport.c in RT-Thread through 5.0.2...

CVE-2024-24335

A heap buffer overflow occurs in the dfsv2 romfs filesystem RT-Thread through 5.0.2...

CVE-2024-25391

A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2...