CVE-2024-52802 - CVE House
Back to Database
Status published High CVE-2024-52802

RIOT-OS missing dhcpv6_opt_t minimum header length check

Vulnerability Description

RIOT is an operating system for internet of things (IoT) devices. In version 2024.04 and prior, the function `_parse_advertise`, located in `/sys/net/application_layer/dhcpv6/client.c`, has no minimum header length check for `dhcpv6_opt_t` after processing `dhcpv6_msg_t`. This omission could lead to an out-of-bound read, causing system inconsistency. Additionally, the same lack of a header length check is present in the function `_preparse_advertise`, which is called by `_parse_advertise` before handling the request. As of time of publication, no known patched version exists.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-52802

Credits & Attribution

No credits recorded in the NVD database.

References

More from RIOT-OS

View All →
CVE-2025-66647
RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass
Low 1.7
CVE-2025-66646
RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reass
Low 1.7
CVE-2025-53888
RIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link_layer/l2filter/l2filter.c
Medium 6.6
CVE-2024-53980
Spoofed length byte traps CC2538 in endless loop
Medium 6.9
CVE-2024-32018
Ineffective size check due to assert() and buffer overflow in RIOT
High 8.8

Affected Vendor

Affected Software

RIOT
Vulnerable Versions:
<= 2024.04

Timeline

Official Publish: November 22nd, 2024
Last Modified: November 25th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-20 CWE-125

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1213 Data from Information Repositories
Collection
T1565.002 Stored Data Manipulation
Impact
T1003 OS Credential Dumping
Credential Access
T1552 Unsecured Credentials
Credential Access