CVE-2026-14605: RT-Thread ls1c CAN ls1c_can.h recvmsg stack-based overflow
A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1ccan.h of the component ls1c CAN Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14605?
The severity of CVE-2026-14605 is classified as high with a score of 7.8.
What type of vulnerability is CVE-2026-14605?
CVE-2026-14605 is a stack-based buffer overflow vulnerability.
How do I fix CVE-2026-14605?
To fix CVE-2026-14605, update your RT-Thread software to version 5.0.3 or later.
What are the implications of CVE-2026-14605?
CVE-2026-14605 allows local access to exploit the buffer overflow, potentially allowing attackers to execute malicious code.
Which component is affected by CVE-2026-14605?
CVE-2026-14605 affects the ls1c CAN Handler component in the RT-Thread operating system.