RT-Thread vulnerabilities
We track 9 vulnerabilities in RT-Thread products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on July 3, 2026.
Latest RT-Thread vulnerabilities
- 7.8 High severity
RT-Thread: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in RT-Thread up to 5.0.2. Affected by this issue is the function CAN_Receive in the library bsp/synwit/libraries/SWM341_CSL/CMSIS/DeviceSupport/SWM341.h of the component SWM341 CAN Handler. Performing a manipulation results
- 7.8 High severity
RT-Thread: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1c_can.h of the component ls1c CAN Handler. Such manipulation leads to stack-based buffer overflow.
- 7.8 High severity
RT-Thread: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability, which was classified as critical, was found in RT-Thread up to 5.1.0. This affects the function sys_device_open/sys_device_read/sys_device_control/sys_device_init/sys_device_close/sys_device_write of the file components/drivers/core/device.c.
- 9.8 Critical severity
RT-Thread: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability, which was classified as critical, was found in RT-Thread 5.1.0. Affected is the function sys_recvfrom of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument from leads to memory corruption.
- 9.8 Critical severity
RT-Thread: Improper Validation of Array Index
A vulnerability, which was classified as critical, has been found in RT-Thread 5.1.0. This issue affects the function sys_thread_sigprocmask of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument how leads to improper validation o
- 9.8 Critical severity
RT-Thread: NULL Pointer Dereference
A vulnerability classified as critical was found in RT-Thread 5.1.0. This vulnerability affects the function csys_sendto of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument to leads to null pointer dereference.
- 9.8 Critical severity
RT-Thread: Improper Validation of Array Index
A vulnerability classified as critical has been found in RT-Thread 5.1.0. This affects the function sys_sigprocmask of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument how leads to improper validation of array index.
- 9.8 Critical severity
RT-Thread: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in RT-Thread 5.1.0. It has been rated as critical. Affected by this issue is the function sys_select of the file rt-thread/components/lwp/lwp_syscall.c of the component Parameter Handler. The manipulation of the argument timeout leads
- 7.5 High severity
rt-thread: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
RT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L * seed + 2531011L; return (seed >> 16) & 0x7FFF;" in calc_random in drivers/misc/rt_random.c.