A heap buffer overflow occurs in finsh/msh_file.c and finsh/msh.c in RT-Thread through 5.0.2.
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
| Link | Tags |
|---|---|
| https://github.com/RT-Thread/rt-thread/issues/8286 | issue tracking |
| https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt | third party advisory |
| https://security.humanativaspa.it/multiple-vulnerabilities-in-rt-thread-rtos/ | third party advisory |
| https://seclists.org/fulldisclosure/2024/Mar/28 | mailing list |
| http://www.openwall.com/lists/oss-security/2024/03/05/1 | mailing list |