
Vulnerabilities
RIOT OS Patch Fixes Critical DHCPv6 Buffer Overread in IoT Devices
A critical flaw in RIOT OS allows remote heap reads via malformed DHCPv6 replies. Version 2026.07 patches the vulnerability affecting embedded systems.
Everything Threat Times has reported about DHCPv6: 2 stories, newest first. Part of our Vulnerabilities coverage.

A critical flaw in RIOT OS allows remote heap reads via malformed DHCPv6 replies. Version 2026.07 patches the vulnerability affecting embedded systems.

Amazon Web Services published a security bulletin detailing CVE-2026-7424, an integer underflow flaw in the FreeRTOS-Plus-TCP stack’s DHCPv6 sub-option parser.