CVE-2026-22213

Katalog CVE

CVSS 9.8 · Critical EPSS 0,40%

Kerentanan Stack-based Buffer Overflow pada riot-os riot. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in the tapslip6 utility. The vulnerability is caused by unsafe string concatenation in the devopen() function, which constructs a device path using unbounded user-controlled input. The utility uses strcpy() and strcat() to concatenate the fixed prefix '/dev/' with a user-supplied device name provided via the -s command-line option without bounds checking. This allows an attacker to supply an excessively long device name and overflow a fixed-size stack buffer, leading to process crashes and memory corruption.

Rincian

Terbit di NVD

12 Januari 2026

Terakhir diubah

14 Juli 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://seclists.org/fulldisclosure/2026/Jan/15 exploit · mailing list · advisory pihak ketiga
• https://www.vulncheck.com/advisories/riot-os-stack-based-buffer-overflow-in-tapslip6-utility advisory pihak ketiga
• https://github.com/RIOT-OS/RIOT product
• https://www.riot-os.org/ product