CVE-2026-14606

Name of the Vulnerable Software and Affected Versions RT-Thread versions prior to 5.0.3

Description A stack-based buffer overflow occurs in the SWM341 CAN Handler component within the CAN Receive() function located in the bsp/synwit/libraries/SWM341 CSL/CMSIS/DeviceSupport/SWM341.h library. This issue allows for local exploitation through specific manipulation.

Recommendations As a temporary workaround, consider restricting the use of the CAN Receive() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.