CVE-2026-14605 | RT-Thread up to 5.0.2 ls1c CAN ls1c_can.h recvmsg stack-based overflow (Issue 11424)

A vulnerability, which was classified as critical, was found in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1c_can.h of the component ls1c CAN Handler. Such manipulation leads to stack-based buffer overflow.

This vulnerability is uniquely identified as CVE-2026-14605. Local access is required to approach this attack. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More