Buffer Overflow Vulnerability in RIOT OS Decoder

CVE-2020-15350

What is CVE-2020-15350?

The RIOT OS 2020.04 version contains a vulnerability in its base64 decoder, specifically within the base64_decode() function. This function utilizes an output buffer estimation method that inaccurately calculates the buffer size needed for decoded output, primarily due to an arithmetic rounding error. Additionally, it fails to account for potential padding bytes when estimating the expected decoded size. As a result, this vulnerability can be exploited by creating a crafted base64 input, leading to a buffer overflow situation that may compromise the integrity of the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References