PatchTheCVEriot vulnerabilities and fixes
Recent CVEs affecting riot, with upgrade or downgrade steps. 11 tracked.
riot has 11 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 11. Most recent: 2026-02-04. Highest priority: CVE-2024-32017 (score 63/100).
- CVE-2025-66647 CRITICAL 9.8 UPGRADE RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Thi
- CVE-2025-66646 HIGH 7.5 UPGRADE RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Thi
- CVE-2026-22214 CRITICAL 9.8 UPGRADE RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in
- CVE-2026-22213 CRITICAL 9.8 UPGRADE RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in
- CVE-2026-25139 CRITICAL 9.1 UPGRADE RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Thi
- CVE-2025-53888 CRITICAL 9.8 UPGRADE RIOT-OS, an operating system that supports Internet of Things devices, has an ineffective size check implement
- CVE-2024-53980 HIGH 7.5 UPGRADE RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Thi
- CVE-2024-52802 HIGH 7.5 UPGRADE RIOT is an operating system for internet of things (IoT) devices
- CVE-2024-32018 HIGH 8.8 UPGRADE RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit
- CVE-2024-32017 CRITICAL 9.8 UPGRADE RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit
- CVE-2024-31225 HIGH 8.3 UPGRADE RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit
FAQ
How do I fix riot vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is riot being exploited right now?
None of the tracked riot CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which riot CVE should I patch first?
CVE-2024-32017 currently ranks highest (63/100): RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit.