Riskcovery

CVE-2026-102693

RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID

State
Published
Severity
9.6 Critical
Published
Oct 16, 2026
Updated
Oct 16, 2026
Reserved
Sep 29, 2026

Read the record on cve.org

Description

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's _atwinc15x0_sta_set_current_ssid function uses strcpy to copy an SSID without checking the destination size. When MODULE_ATWINC15X0_DYNAMIC_CONNECT is enabled, a nearby attacker can advertise a malformed or oversized SSID that is processed during Wi-Fi scanning, causing memory corruption and potentially a hard fault, denial of service, or code execution. This issue is fixed in version 2026.04.

Scores

CVSSScoreVectorSource
3.19.6 CriticalCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HGitHub_M

Weaknesses

  • CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
  • CWE-121 Stack-based Buffer Overflow

Affected Products

ProductVersions
RIOTRIOT-OS
  • < 2026.04Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.