Approved changes feed: RSS · Atom

cpe:2.3:a:apache:nuttx:10.0.0:*:*:*:*:*:*:*

part: a version: 10.0.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductNuttx (94585a9b-ed2c-5417-8f51-c76b0efd35cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/nuttx purl2cpe 2026-06-01 10:14:27.918674
pkg:github/apache/incubator-nuttx purl2cpe 2026-06-01 10:14:27.918676
pkg:github/michal-lyszczek-red/nuttx purl2cpe 2026-06-01 10:14:27.918677
pkg:sourceforge/nuttx purl2cpe 2026-06-01 10:14:27.918678

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-17529 vulnerable 2026-06-08 05:20:56.758560 Apache NuttX (incubating) Out of Bound Write from invalid fragmentation offset value specified in the IP header
Out-of-bounds Write vulnerability in TCP Stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying and invalid fragmentation offset value specified in the IP header. This is only impacts builds with both CONFIG_EXPERIMENTAL and CONFIG_NET_TCP_REASSEMBLY build flags enabled.
Published: 2020-12-09T16:35:14.000Z
Updated: 2025-02-13T16:27:37.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-17528 vulnerable 2026-06-08 05:20:56.758011 Apache NuttX (incubating) Out of Bound Write from invalid TCP Urgent length
Out-of-bounds Write vulnerability in TCP stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying arbitrary urgent data pointer offsets within TCP packets including beyond the length of the packet.
Published: 2020-12-09T16:35:13.000Z
Updated: 2025-02-13T16:27:37.002Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.