CVE-2024-24335
Published: 27 March 2024
Summary
CVE-2024-24335 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Rt-Thread Rt-Thread. Its CVSS base score is 8.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 21.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-21757
Vulnerability details
A heap buffer overflow occurs in the dfs_v2 romfs filesystem RT-Thread through 5.0.2.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The heap buffer overflow in the dfs_v2 romfs filesystem can be exploited to cause memory corruption, enabling denial of service or arbitrary code execution for privilege escalation.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.