PatchTheCVECVE-2020-17529: Out-of-bounds Write vulnerability in TCP Stack of Apache NuttX (incubating) versions up to and including 9.1.0
CVE-2020-17529 is a critical-severity flaw (CVSS 9.8) affecting nuttx. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Out-of-bounds Write vulnerability in TCP Stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying and invalid fragmentation offset value specified in the IP header. This is only impacts builds with both CONFIG_EXPERIMENTAL and CONFIG_NET_TCP_REASSEMBLY build flags enabled.
Why this priority
- Critical severity
- Remotely exploitable, no login, no user action
- On your watchlist
A fixed release or distro patch exists.
Risk facts
| CVSS score | 9.8 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 2.9% (top 13%) |
| CISA exploited list | No |
| Weakness | CWE-787 |
| Published | 2020-12-09 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2020-17529?
nuttx: upgrade to newer than 9.1.0. Exact commands for each OS are on this page.
Is CVE-2020-17529 being exploited?
CVE-2020-17529 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2020-17529 affect?
CVE-2020-17529 affects nuttx. Severity is critical (CVSS 9.8). Out-of-bounds Write vulnerability in TCP Stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying and invalid fragmentation offset value specified in the IP header. This
How urgent is CVE-2020-17529?
Priority 66/100. Critical severity; Remotely exploitable, no login, no user action; On your watchlist
Related CVEs
- CVE-2025-48769 HIGH 8.1 UPGRADE Use After Free vulnerability was discovered in fs/vfs/fs_rename code of the Apache NuttX RTOS, that due recurs
- CVE-2025-48768 MEDIUM 6.5 UPGRADE Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fs_inoderemove code of the Ap
- CVE-2025-47869 CRITICAL 9.8 UPGRADE Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability was discovered in Apache
- CVE-2025-47868 CRITICAL 9.8 UPGRADE Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf
- CVE-2025-35003 CRITICAL 9.8 UPGRADE Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulner