PT-2026-55579 · Undefined · Undefined

Zephyr Saxon · Published 2026-07-03 · Updated 2026-07-03 · CVE-2026-14605

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1c can.h of the component ls1c CAN Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Fix

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-119

CWE-121

Related Identifiers

CVE-2026-14605

Affected Products

Undefined

References · 7

• 🔥 https://github.com/RT-Thread/rt-thread/issues/11424 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14605 · Security Note
• https://vuldb.com/submit/844580 · Note
• https://github.com/RT-Thread/rt-thread · Note
• https://vuldb.com/vuln/376113/cti · Note
• https://vuldb.com/cve/CVE-2026-14605 · Note
• https://vuldb.com/vuln/376113 · Note