What’s Vulnerable › Products

Apache Software Foundation Apache NuttX RTOS vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Apache Software Foundation Apache NuttX RTOS version is affected

Latest Apache Software Foundation Apache NuttX RTOS vulnerabilities

• CVE-2025-48769 — Apache NuttX RTOS: fs/vfs/fs_rename: use after free (CVSS 8.1)
• CVE-2025-48768 — Apache NuttX RTOS: fs/inode: fs_inoderemove root inode removal (CVSS 6.5)
• CVE-2025-47869 — Apache NuttX RTOS: examples/xmlrpc: Fix calls buffers size. (CVSS 9.8)
• CVE-2025-47868 — Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition. (CVSS 9.8)
• CVE-2025-35003 — Apache NuttX RTOS: NuttX Bluetooth Stack HCI and UART DoS/RCE Vulnerabilities. (CVSS 9.8)
• CVE-2021-26461 — malloc, realloc and memalign implementations are vulnerable to integer wrap-arounds (CVSS 9.8)
• CVE-2020-17529 — Apache NuttX (incubating) Out of Bound Write from invalid fragmentation offset value specified in the IP header (CVSS 9.8)
• CVE-2020-17528 — Apache NuttX (incubating) Out of Bound Write from invalid TCP Urgent length (CVSS 9.1)
• CVE-2020-1939 — (CVSS 9.8)