Apache Software Foundation

malloc, realloc and memalign implementations are vulnerable to integer wrap-arounds

Apache NuttX (incubating) Out of Bound Write from invalid fragmentation offset value specified in the IP header

The Apache NuttX (Incubating) project provides an optional separate "apps" repository which contains various optional components and example programs. One of these, ftpd, had a NULL pointer dereference bug. The NuttX RTOS itself is not affected. Users of the optional apps repository are affected only if they have enabled ftpd. Versions 6.15 to 8.2 are affected.

Apache NuttX RTOS: NuttX Bluetooth Stack HCI and UART DoS/RCE Vulnerabilities.

Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.

Apache NuttX RTOS: examples/xmlrpc: Fix calls buffers size.

Apache NuttX (incubating) Out of Bound Write from invalid TCP Urgent length

Apache NuttX RTOS: fs/vfs/fs_rename: use after free

Apache NuttX RTOS: fs/inode: fs_inoderemove root inode removal