CVE-2024-25391 | BDVDB-2026-228921 Detail
rt-threadrt-thread
Description#
A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-121 Stack-based Buffer Overflow
References#
- https://github.com/RT-Thread/rt-thread/issues/8287
- https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt
- https://security.humanativaspa.it/multiple-vulnerabilities-in-rt-thread-rtos/
- https://seclists.org/fulldisclosure/2024/Mar/28
- http://www.openwall.com/lists/oss-security/2024/03/05/1
- http://seclists.org/fulldisclosure/2024/Mar/28
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.