CVE-2024-31225

RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. The `_on_rd_init()` function does not implement a size check before copying data to the `_result_buf` static buffer. If an attacker can craft a long enough payload, they could cause a buffer overflow. If the unchecked input above is attacker-controlled and crosses a security boundary, the impact of the buffer overflow vulnerability could range from denial of service to arbitrary code execution. This issue has yet to be patched. Users are advised to add manual bounds checking.

• CWE-120

• http://seclists.org/fulldisclosure/2024/May/7Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/05/07/3Mailing List, Third Party Advisory
• https://github.com/RIOT-OS/RIOT/blob/master/sys/net/application_layer/cord/lc/cord_lc.c#L218Product
• https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-2572-7q7c-3965Exploit, Vendor Advisory
• http://seclists.org/fulldisclosure/2024/May/7Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/05/07/3Mailing List, Third Party Advisory
• https://github.com/RIOT-OS/RIOT/blob/master/sys/net/application_layer/cord/lc/cord_lc.c#L218Product
• https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-2572-7q7c-3965Exploit, Vendor Advisory

Published

May 1, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-31219Discourse-reactions is a plugin that allows user to add thei…4.3
• CVE-2024-3122CHANGING Mobile One Time Password does not properly filter p…4.9
• CVE-2024-31220Sunshine is a self-hosted game stream host for Moonlight. St…7.3
• CVE-2024-31221Sunshine is a self-hosted game stream host for Moonlight. St…5.9
• CVE-2024-31223Fides is an open-source privacy engineering platform, and `S…5.3
• CVE-2024-31224GPT Academic provides interactive interfaces for large langu…9.8
• CVE-2024-31226Sunshine is a self-hosted game stream host for Moonlight. Us…2.9
• CVE-2024-31227Redis is an open source, in-memory database that persists on…4.4
• CVE-2024-31228Redis is an open source, in-memory database that persists on…6.5
• CVE-2024-31229Server-Side Request Forgery (SSRF) vulnerability in Really S…5.5
• CVE-2024-3123CHANGING Mobile One Time Password's uploading function in a …7.2
• CVE-2024-31230Missing Authorization vulnerability in ShortPixel ShortPixel…5.3