Skip to content

Rt-Thread · product

RT-Thread

18 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.

  1. RT-Thread lwp_syscall.c csys_sendto null pointer dereferenceCVE-2025-5867Rt-Thread · CVSS 8 · 1.2% likely

    CWE-476

  2. RT-Thread lwp_syscall.c sys_thread_sigprocmask array indexCVE-2025-5868Rt-Thread · CVSS 8 · 1.1% likely

    CWE-129

  3. A stack buffer overflow occurs in net/at/src/at_server.c in RT-Thread through 5.0.2.CVE-2024-25393Rt-Thread · CVSS 9.8 · 1.1% likely

    CWE-121

  4. A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2.CVE-2024-25395Rt-Thread · CVSS 8.8 · 1.0% likely

    CWE-120

  5. RT-Thread Parameter lwp_syscall.c sys_select memory corruptionCVE-2025-5865Rt-Thread · CVSS 8 · 1.0% likely

    CWE-119

  6. RT-Thread lwp_syscall.c sys_sigprocmask array indexCVE-2025-5866Rt-Thread · CVSS 8 · 0.9% likely

    CWE-129

  7. RT-Thread lwp_syscall.c sys_recvfrom memory corruptionCVE-2025-5869Rt-Thread · CVSS 8 · 0.9% likely

    CWE-119

  8. RT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L * seed + 2531011L; return (seed >> 16) & 0x7FFF;" in calc_random in drivers/misc/rt_rando…CVE-2024-25389Rt-Thread · CVSS 7.5 · 0.8% likely

    CWE-338

  9. A buffer overflow occurs in utilities/ymodem/ry_sy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character.CVE-2024-25394Rt-Thread · CVSS 4.3 · 0.6% likely

    CWE-120

  10. A heap buffer overflow occurs in the dfs_v2 romfs filesystem RT-Thread through 5.0.2.CVE-2024-24335Rt-Thread · CVSS 8.4 · 0.4% likely

    CWE-122

  11. A heap buffer overflow occurs in dfs_v2 dfs_file in RT-Thread through 5.0.2.CVE-2024-24334Rt-Thread · CVSS 8.4 · 0.4% likely

    CWE-122

  12. A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2.CVE-2024-25391Rt-Thread · CVSS 8.4 · 0.3% likely

    CWE-121

  13. A heap buffer overflow occurs in finsh/msh_file.c and finsh/msh.c in RT-Thread through 5.0.2.CVE-2024-25390Rt-Thread · CVSS 8.4 · 0.3% likely

    CWE-122

  14. drivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow.CVE-2024-25388Rt-Thread · CVSS 8.4 · 0.3% likely

    CWE-195

  15. RT-Thread device.c sys_device_write memory corruptionCVE-2025-6693Rt-Thread · CVSS 7.8 · 0.3% likely

    CWE-119

  16. RT-Thread lwp_syscall.c sys_timer_settime information disclosureCVE-2025-1115Rt-Thread · CVSS 3.3 · 0.3% likely

    CWE-200

  17. An out-of-bounds access occurs in utilities/var_export/var_export.c in RT-Thread through 5.0.2.CVE-2024-25392Rt-Thread · CVSS 5.9 · 0.3% likely

    CWE-125

  18. RT-Thread through 5.3.0 Memory Corruption via USB CDC VCOM DriverCVE-2026-108952RT-Thread · CVSS 4.6 · 0.2% likely

    CWE-843

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in