PatchTheCVECVE-2020-17528: Out-of-bounds Write vulnerability in TCP stack of Apache NuttX (incubating) versions up to and including 9.1.0
CVE-2020-17528 is a critical-severity flaw (CVSS 9.1) affecting nuttx. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Out-of-bounds Write vulnerability in TCP stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying arbitrary urgent data pointer offsets within TCP packets including beyond the length of the packet.
Why this priority
- Critical severity
- Remotely exploitable, no login, no user action
- On your watchlist
A fixed release or distro patch exists.
Risk facts
| CVSS score | 9.1 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 3.2% (top 12%) |
| CISA exploited list | No |
| Weakness | CWE-787 |
| Published | 2020-12-09 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2020-17528?
nuttx: upgrade to newer than 9.1.0. Exact commands for each OS are on this page.
Is CVE-2020-17528 being exploited?
CVE-2020-17528 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2020-17528 affect?
CVE-2020-17528 affects nuttx. Severity is critical (CVSS 9.1). Out-of-bounds Write vulnerability in TCP stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying arbitrary urgent data pointer offsets within TCP packets including beyo
How urgent is CVE-2020-17528?
Priority 64/100. Critical severity; Remotely exploitable, no login, no user action; On your watchlist
Related CVEs
- CVE-2025-48769 HIGH 8.1 UPGRADE Use After Free vulnerability was discovered in fs/vfs/fs_rename code of the Apache NuttX RTOS, that due recurs
- CVE-2025-48768 MEDIUM 6.5 UPGRADE Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fs_inoderemove code of the Ap
- CVE-2025-47869 CRITICAL 9.8 UPGRADE Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability was discovered in Apache
- CVE-2025-47868 CRITICAL 9.8 UPGRADE Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf
- CVE-2025-35003 CRITICAL 9.8 UPGRADE Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulner