CVE-2026-102693 Details
Description
RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's _atwinc15x0_sta_set_current_ssid function uses strcpy to copy an SSID without checking the destination size. When MODULE_ATWINC15X0_DYNAMIC_CONNECT is enabled, a nearby attacker can advertise a malformed or oversized SSID that is processed during Wi-Fi scanning, causing memory corruption and potentially a hard fault, denial of service, or code execution. This issue is fixed in version 2026.04.
A remote stack buffer overflow vulnerability has been identified in the RIOT operating system's ATWINC15x0 Wi-Fi driver, prior to version 2026.04. The issue arises in the '_atwinc15x0_sta_set_current_ssid' function, which improperly uses 'strcpy' to copy SSID data without validating the destination buffer size. When 'MODULE_ATWINC15X0_DYNAMIC_CONNECT' is active, an attacker can exploit this flaw by sending a malformed or oversized SSID that the device processes during Wi-Fi scanning. This exploitation leads to memory corruption, causing a hard fault, denial of service, or potentially allowing arbitrary code execution on the affected device.
The vulnerability has been fixed in RIOT version 2026.04 by replacing 'strcpy' with 'strncpy' to ensure proper bounds checking. Users should update to this version to mitigate the vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 16, 2026CISA-ADP
Assessed Oct 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/RIOT-OS/RIOT/commit/5209c1b84f9771342f079b7d5d94d8207fdd5f0a | [email protected] | Source CodeVendor |
| https://github.com/RIOT-OS/RIOT/releases/tag/2026.04 | [email protected] | Release NotesVendor |
| https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-gwgv-6976-hxrg | [email protected] | AdvisoryTechnical AnalysisRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | [email protected] |
| CWE-121 | Stack-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| RIOT | <= master |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 16, 2026 | CVE Modified | CISA-ADP |
| Oct 16, 2026 | New CVE Received | [email protected] |