What’s Vulnerable › Vulnerabilities
CVE-2024-31225: Lack of size check and buffer overflow in RIOT
- Severity: critical (CVSS 9.0 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.3% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2024-05-01 · updated 2026-06-17
- Weakness: CWE-120
Description
RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. The `_on_rd_init()` function does not implement a size check before copying data to the `_result_buf` static buffer. If an attacker can craft a long enough payload, they could cause a buffer overflow. If the unchecked input above is attacker-controlled and crosses a security boundary, the impact of the buffer overflow vulnerability could range from denial of service to arbitrary code execution. This issue has yet to be patched. Users are advised to add manual bounds checking.
Affected products
- RIOT-OS RIOT: before 2024.01 — fixed in 2024.01
How to fix
Upgrade to a fixed version: RIOT-OS RIOT 2024.01. Check the vendor advisory for mitigations.
References
- http://seclists.org/fulldisclosure/2024/May/7
- http://www.openwall.com/lists/oss-security/2024/05/07/3
- https://github.com/RIOT-OS/RIOT/blob/master/sys/net/application_layer/cord/lc/cord_lc.c#L218
- https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-2572-7q7c-3965
- http://seclists.org/fulldisclosure/2024/May/7
- http://www.openwall.com/lists/oss-security/2024/05/07/3
- https://github.com/RIOT-OS/RIOT/blob/master/sys/net/application_layer/cord/lc/cord_lc.c#L218
- https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-2572-7q7c-3965
Get alerted when CVE-2024-31225 or the next vulnerability affects your stack