CVE-2026-102693— RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID
Quick assessment
Affected
RIOT-OS RIOT
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
RIOT 是一个专为物联网设备及其他嵌入式系统设计的开源微控制器操作系统。在 2026.04 版本之前，ATWINC15x0 驱动中的 函数使用 复制 SSID 时未检查目标缓冲区的大小。当启用 模块时，附近的攻击者可以广播格式错误或过长的 SSID；该 SSID 在 Wi-Fi 扫描过程中被处理，可能导致内存破坏，进而引发硬故障、拒绝服务（DoS）或代码执行漏洞。此问题已在 2026.04 版本中修复。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-102693
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID
Source: CVE Program / CVE List V5
Vulnerability Description
RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's _atwinc15x0_sta_set_current_ssid function uses strcpy to copy an SSID without checking the destination size. When MODULE_ATWINC15X0_DYNAMIC_CONNECT is enabled, a nearby attacker can advertise a malformed or oversized SSID that is processed during Wi-Fi scanning, causing memory corruption and potentially a hard fault, denial of service, or code execution. This issue is fixed in version 2026.04.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-102693
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-102693
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-102693 (1)
Vendor Advisories for CVE-2026-102693 (1)
Vendor Pages for CVE-2026-102693 (1)
-
🔗 Release Release-2026.04 · RIOT-OS/RIOT · GitHub x_refsource_MISC
Same Patch Batch · RIOT-OS · 2026-10-16 · 3 CVEs total
| CVE-2026-49868 | 9.8 CRITICAL | RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underfl |
| CVE-2026-102692 | 9.1 CRITICAL | RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memo |
IV. Related Vulnerabilities
Same product: RIOT
-
CVE-2026-49868
RIOT: DHCPv6 client _parse_reply() missing sub-option length -
CVE-2026-102692
RIOT: Potential integer overflow in nanocoap Block2 handling -
CVE-2026-107838
RIOT: nanocoap_fileserver ignores response initialization fa -
CVE-2026-107837
RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Han -
CVE-2026-107836
RIOT: nanoCoAP Block2 client slice handling underflows on in
Same vendor: RIOT-OS
-
CVE-2026-49868
RIOT: DHCPv6 client _parse_reply() missing sub-option length -
CVE-2026-102692
RIOT: Potential integer overflow in nanocoap Block2 handling -
CVE-2026-107838
RIOT: nanocoap_fileserver ignores response initialization fa -
CVE-2026-107837
RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Han -
CVE-2026-107836
RIOT: nanoCoAP Block2 client slice handling underflows on in
Same weakness: CWE-120
-
CVE-2025-29897
Stack-based Buffer Overflow in qsyncsrv.cgi -
CVE-2026-0993
SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Bo -
CVE-2026-110695
turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py ST -
CVE-2026-102176
Junos OS: Specific packets cause SDK service crash or Routin -
CVE-2016-15060
PCMan FTP Server PORT buffer overflow
V. Comments for CVE-2026-102693
No comments yet