CVE-2026-22214: RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in ethos Serial Frame Parser

Published Jan 12, 2026
·
Updated

RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in the ethos utility due to missing bounds checking when processing incoming serial frame data. The vulnerability occurs in the handlechar() function, where incoming frame bytes are appended to a fixed-size stack buffer without verifying that the current write index remains within bounds. An attacker capable of sending crafted serial or TCP-framed input can cause the current write index to exceed the buffer size, resulting in a write past the end of the stack buffer. This condition leads to memory corruption and application crash.

Affected Software

4 affected components
RIOT OS<=2026.01-devel-317
RIOT-OS RIOT<2025.10
RIOT-OS RIOT=2026.01-devel
RIOT-OS RIOT=2026.01-rc1

Event History

Jan 12, 2026
CVE Published
via MITRE·11:03 PM
Data Sourced
via MITRE·11:03 PM
DescriptionWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Jun 21, 58335
Event
via NVD·04:40 AM

Frequently Asked Questions

1

What is the severity of CVE-2026-22214?

CVE-2026-22214 is considered a high severity vulnerability due to the potential for remote code execution resulting from the stack-based buffer overflow.

2

How do I fix CVE-2026-22214?

To fix CVE-2026-22214, update to a version of RIOT OS that is newer than 2026.01-devel-317, which includes the necessary bounds checking.

3

What impact does CVE-2026-22214 have on my system?

CVE-2026-22214 can allow an attacker to gain unauthorized access or execute arbitrary code on systems running the vulnerable versions of RIOT OS.

4

Which versions of RIOT OS are affected by CVE-2026-22214?

CVE-2026-22214 affects all versions of RIOT OS up to and including 2026.01-devel-317.

5

Is CVE-2026-22214 exploitable remotely?

Yes, CVE-2026-22214 can be exploited remotely through the processing of malicious serial frame data.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203