CVE-2026-22214: RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in ethos Serial Frame Parser
RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in the ethos utility due to missing bounds checking when processing incoming serial frame data. The vulnerability occurs in the handlechar() function, where incoming frame bytes are appended to a fixed-size stack buffer without verifying that the current write index remains within bounds. An attacker capable of sending crafted serial or TCP-framed input can cause the current write index to exceed the buffer size, resulting in a write past the end of the stack buffer. This condition leads to memory corruption and application crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22214?
CVE-2026-22214 is considered a high severity vulnerability due to the potential for remote code execution resulting from the stack-based buffer overflow.
How do I fix CVE-2026-22214?
To fix CVE-2026-22214, update to a version of RIOT OS that is newer than 2026.01-devel-317, which includes the necessary bounds checking.
What impact does CVE-2026-22214 have on my system?
CVE-2026-22214 can allow an attacker to gain unauthorized access or execute arbitrary code on systems running the vulnerable versions of RIOT OS.
Which versions of RIOT OS are affected by CVE-2026-22214?
CVE-2026-22214 affects all versions of RIOT OS up to and including 2026.01-devel-317.
Is CVE-2026-22214 exploitable remotely?
Yes, CVE-2026-22214 can be exploited remotely through the processing of malicious serial frame data.