CVE-2026-14606

Publié : 3 juillet 2026

Modifié : 3 juillet 2026

Score CVSS

7.8

HIGH

Description détaillée

A security flaw has been discovered in RT-Thread up to 5.0.2. Affected by this issue is the function CAN_Receive in the library bsp/synwit/libraries/SWM341_CSL/CMSIS/DeviceSupport/SWM341.h of the component SWM341 CAN Handler. Performing a manipulation results in stack-based buffer overflow. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Références et Patchs

https://github.com/RT-Thread/rt-thread/https://github.com/RT-Thread/rt-thread/issues/11425 https://vuldb.com/cve/CVE-2026-14606 https://vuldb.com/submit/844591 https://vuldb.com/vuln/376114 https://vuldb.com/vuln/376114/cti

Dernières Vulnérabilités

CVE-2026-58597

Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

VOIR DÉTAILS

CVE-2026-58524

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

VOIR DÉTAILS

CVE-2026-58522

Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

VOIR DÉTAILS