CVE-2025-47869

A buffer overflow vulnerability exists in the Apache NuttX RTOS apps/examples/xmlrpc application. The issue stems from an application boundary error where a device stats structure used to store remotely provided parameters utilized a hardcoded buffer size for untrusted input. This flaw affects ve...

CVE-2021-26461

Apache NuttX (OS) versions prior to 10.1.0 are affected by CVE-2021-26461 due to integer wrap-around in memory management calls (malloc, realloc, memalign). This can lead to arbitrary memory allocation and outcomes such as a crash or remote code execution. Remediation is to update to 10.1.0 or la...

CVE-2025-48769

CVE-2025-48769 affects Apache NuttX RTOS. The flaw is a Use-After-Free in the fs/vfs/fs_rename code caused by a recursive implementation reusing a single buffer across two pointers, enabling arbitrary user-provided buffer reallocations and writes to a freed heap chunk. In affected scenarios, this...

CVE-2025-35003

The Apache NuttX RTOS Bluetooth Stack contains Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulnerabilities within its HCI and UART components . These flaws occur when the system processes maliciously crafted packets, potentially leading ...

CVE-2020-17529

CVE-2020-17529 affects Apache NuttX (incubating) TCP Stack up to 9.1.0 and 10.0.0, when built with CONFIG_EXPERIMENTAL and CONFIG_NET_TCP_REASSEMBLY. It describes an out-of-bounds write triggered by an invalid fragmentation offset in the IP header, leading to memory corruption. CVSS metrics repor...

CVE-2020-1939

The CVE-2020-1939 issue affects the optional ftpd component within the Apache NuttX Apps repository, not the NuttX RTOS core. A NULL pointer dereference in ftpd is the named problem. Impact is limited to users who have enabled ftpd in versions 6.15 through 8.2. The NuttX RTOS itself is not affect...

CVE-2025-47868

An out-of-bounds write resulting in a possible heap-based buffer overflow vulnerability exists in the tools/bdf-converter font conversion utility within the Apache NuttX RTOS repository. This standalone, optional tool is susceptible when exposed to external user-provided data, such as publicly av...

CVE-2020-17528

The CVE-2020-17528 entry affects Apache NuttX (incubating) and its TCP stack, with vulnerable versions up to 9.1.0 and 10.0.0. The issue is an out-of-bounds write caused by supplying arbitrary urgent data pointer offsets within TCP packets, including beyond packet length, leading to memory corrup...

CVE-2025-48768

Vulnerability: Apache NuttX RTOS contains an issue in fs/inode/fs_inoderemove that can enable root inode removal, triggering a debug assert, NULL pointer dereference (architecture-dependent), or denial of service. Affected versions: 10.0.0 through 12.9.9; impact arises for filesystem-based servic...