https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-25139.htmlhttps://patchthecve.com/cve/CVE-2026-25139.htmlWed, 17 Jun 2026 10:24:10 +0000CRITICAL 9.1: RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices. In version 2025.10 and prior, multiple out-of-bounds read allow any unauthenticated user, with ability to send or manipulate input packets, to rhttps://patchthecve.com/cve/CVE-2026-22214.htmlhttps://patchthecve.com/cve/CVE-2026-22214.htmlTue, 14 Jul 2026 16:16:49 +0000CRITICAL 9.8: RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in the ethos utility due to missing bounds checking when processing incoming serial frame data. The vulnerability occurs in the _handle_char() function, where incoming frame bytes are appended https://patchthecve.com/cve/CVE-2026-22213.htmlhttps://patchthecve.com/cve/CVE-2026-22213.htmlTue, 14 Jul 2026 16:16:49 +0000CRITICAL 9.8: RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in the tapslip6 utility. The vulnerability is caused by unsafe string concatenation in the devopen() function, which constructs a device path using unbounded user-controlled input. The utility https://patchthecve.com/cve/CVE-2025-66647.htmlhttps://patchthecve.com/cve/CVE-2025-66647.htmlTue, 13 Oct 2026 11:10:00 +0000CRITICAL 9.8: RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When copying the contents of the first fhttps://patchthecve.com/cve/CVE-2025-66646.htmlhttps://patchthecve.com/cve/CVE-2025-66646.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.5: RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When receiving an fragmented IPv6 packethttps://patchthecve.com/cve/CVE-2025-53888.htmlhttps://patchthecve.com/cve/CVE-2025-53888.htmlWed, 17 Jun 2026 09:39:04 +0000CRITICAL 9.8: RIOT-OS, an operating system that supports Internet of Things devices, has an ineffective size check implemented with `assert()` can lead to buffer overflow in versions up to and including 2025.04. Assertions are usually compiled out in production builds. If assertions are the only defense against uhttps://patchthecve.com/cve/CVE-2024-53980.htmlhttps://patchthecve.com/cve/CVE-2024-53980.htmlWed, 17 Jun 2026 08:09:36 +0000HIGH 7.5: RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices. A malicious actor can send a IEEE 802.15.4 packet with spoofed length byte and optionally spoofed FCS, which eventually results into an endless https://patchthecve.com/cve/CVE-2024-52802.htmlhttps://patchthecve.com/cve/CVE-2024-52802.htmlWed, 17 Jun 2026 08:07:39 +0000HIGH 7.5: RIOT is an operating system for internet of things (IoT) devices. In version 2024.04 and prior, the function `_parse_advertise`, located in `/sys/net/application_layer/dhcpv6/client.c`, has no minimum header length check for `dhcpv6_opt_t` after processing `dhcpv6_msg_t`. This omission could lead tohttps://patchthecve.com/cve/CVE-2024-32018.htmlhttps://patchthecve.com/cve/CVE-2024-32018.htmlWed, 17 Jun 2026 07:29:07 +0000HIGH 8.8: RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. Most codebases define assertion macros which compile to a no-op on non-debug builds. If assertions are the only line of defense against untrusted input,https://patchthecve.com/cve/CVE-2024-32017.htmlhttps://patchthecve.com/cve/CVE-2024-32017.htmlWed, 17 Jun 2026 07:29:07 +0000CRITICAL 9.8: RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. The size check in the `gcoap_dns_server_proxy_get()` function contains a small typo that may lead to a buffer overflow in the subsequent `strcpy()`. In https://patchthecve.com/cve/CVE-2024-31225.htmlhttps://patchthecve.com/cve/CVE-2024-31225.htmlWed, 17 Jun 2026 07:28:00 +0000HIGH 8.3: RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. The `_on_rd_init()` function does not implement a size check before copying data to the `_result_buf` static buffer. If an attacker can craft a long eno