Nuttx (Apache) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 194 known versions, newest CVE from 2026-01-01. Vendor: Apache.
CVEs of Nuttx
- CVE-2025-48769 - CVSS 8.1 (high), 2026-01-01: Use After Free vulnerability was discovered in fs/vfs/fs_rename code of the Apache NuttX RTOS, that due recursive implementation and single buffer use by two…
- CVE-2025-48768 - CVSS 6.5 (medium), 2026-01-01: Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fs_inoderemove code of the Apache NuttX RTOS that allowed root filesystem…
- CVE-2025-47869 - CVSS 9.8 (critical), 2025-06-16: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability was discovered in Apache NuttX RTOS apps/exapmles/xmlrpc application. In…
- CVE-2025-47868 - CVSS 9.8 (critical), 2025-06-16: Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf-converter font conversion utility that is part…
- CVE-2025-35003 - CVSS 9.8 (critical), 2025-05-26: Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulnerabilities were discovered in Apache NuttX RTOS…
- CVE-2021-26461 - CVSS 9.8 (critical), 2021-06-21: Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can…
- CVE-2020-17529 - CVSS 9.8 (critical), 2020-12-09: Out-of-bounds Write vulnerability in TCP Stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by…
- CVE-2020-17528 - CVSS 9.1 (critical), 2020-12-09: Out-of-bounds Write vulnerability in TCP stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by…
- CVE-2020-1939 - CVSS 9.8 (critical), 2020-05-12: The Apache NuttX (Incubating) project provides an optional separate "apps" repository which contains various optional components and example programs. One of…
