CVE-2026-14605

Name of the Vulnerable Software and Affected Versions RT-Thread versions prior to 5.0.3

Description A stack-based buffer overflow exists in the recvmsg() function within the bsp/loongson/ls1cdev/libraries/ls1c can.h library of the ls1c CAN Handler component. This issue requires local access to be exploited.

Recommendations As a temporary workaround, consider restricting the use of the recvmsg() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.