RIOT OS Out-of-Bounds Read Vulnerability in 6LoWPAN Stack Allowing Memory Access or Device Crash

In RIOT OS versions through 2025.10, a vulnerability exists in the 6LoWPAN stack that allows out-of-bounds read operations. This issue can be exploited by any unauthenticated user who can send or manipulate input packets. The vulnerability arises because received packets are improperly validated before being processed, leading to potential access of adjacent memory locations or causing a crash on the affected device.

Impact

Exploitation of this vulnerability can result in unauthorized access to sensitive data in adjacent memory or cause a device crash, particularly on architectures with strict memory access requirements, leading to a denial-of-service condition.