Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-17528
9.1
CRITICALCVSS v3
Published
December 9, 2020
CVSS v2
6.4 MEDIUM
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Out-of-bounds Write vulnerability in TCP stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying arbitrary urgent data pointer offsets within TCP packets including beyond the length of the packet.
apache/nuttx
GitHubApache NuttX is a mature, real-time embedded operating system (RTOS)
GitHubApache NuttX is a mature, real-time embedded operating system (RTOS)= 10.0.0, <= 9.1.0NVD