RIOT vulnerabilities
We track 2 vulnerabilities in RIOT products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 12, 2026.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest RIOT vulnerabilities
- 9.8 Critical severity
RIOT OS: Stack-based Buffer Overflow
RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in the ethos utility due to missing bounds checking when processing incoming serial frame data. The vulnerability occurs in the _handle_char() function,
- 9.8 Critical severity
RIOT OS: Stack-based Buffer Overflow
RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in the tapslip6 utility. The vulnerability is caused by unsafe string concatenation in the devopen() function, which constructs a device path using unbou