RIOT-OS vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-49868 RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems.Critical 9.8 · Oct 16, 2026
• CVE-2026-102693 RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems.Critical 9.6 · Oct 16, 2026
• CVE-2026-102692 RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems.Critical 9.1 · Oct 16, 2026
• CVE-2026-107838 RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems.High 7.5 · Oct 9, 2026
• CVE-2026-107837 RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems.High 8.2 · Oct 9, 2026
• CVE-2026-107836 RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems.High 7.1 · Oct 9, 2026
• CVE-2026-27703 RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices.High 7.5 · Mar 11, 2026
• CVE-2026-25139 RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT) devices and other embedded devices.High 8.7 · Feb 4, 2026
• CVE-2024-52802 RIOT is an operating system for internet of things (IoT) devices.High 7.5 · Nov 22, 2024
• CVE-2024-32018 RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers.High 8.8 · May 1, 2024
• CVE-2024-32017 RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers.Critical 9.8 · May 1, 2024
• CVE-2024-31225 RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers.High 8.3 · May 1, 2024
• CVE-2023-33975 RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames.Critical 9.8 · May 30, 2023
• CVE-2023-33974 RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames.High 7.5 · May 30, 2023
• CVE-2023-33973 RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames.High 7.5 · May 30, 2023
• CVE-2023-24825 RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames.High 7.5 · May 30, 2023
• CVE-2023-24817 RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames.High 7.5 · May 30, 2023
• CVE-2023-24823 RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames.Critical 9.8 · Apr 24, 2023
• CVE-2023-24822 RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames.High 7.5 · Apr 24, 2023
• CVE-2023-24821 RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames.High 7.5 · Apr 24, 2023
• CVE-2023-24820 RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames.High 7.5 · Apr 24, 2023
• CVE-2023-24819 RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames.Critical 9.8 · Apr 24, 2023
• CVE-2023-24818 RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames.High 7.5 · Apr 24, 2023
• CVE-2021-27427 RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resultinHigh 7.3 · May 3, 2022
• CVE-2021-31664 RIOT-OS 2021.01 before commit 44741ff99f7a71df45420635b238b9c22093647a contains a buffer overflow which could allow attackers to obtain sensitive information.High 7.5 · Jun 18, 2021