CVE-2026-102693
Received Received - Intake

Buffer Overflow in RIOT OS ATWINC15x0 Driver

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: GitHub, Inc.

Description
RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's _atwinc15x0_sta_set_current_ssid function uses strcpy to copy an SSID without checking the destination size. When MODULE_ATWINC15X0_DYNAMIC_CONNECT is enabled, a nearby attacker can advertise a malformed or oversized SSID that is processed during Wi-Fi scanning, causing memory corruption and potentially a hard fault, denial of service, or code execution. This issue is fixed in version 2026.04.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-102693
EUVD
EUVD-2026-102946

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
RIOT-OS RIOT < 2026.04

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-102693 is a remote stack buffer overflow in RIOT-OS's ATWINC15x0 driver. It occurs when the driver uses the unsafe strcpy function to copy an SSID without checking the destination buffer size. Attackers can exploit this by broadcasting a malformed SSID via a rogue Access Point, causing memory corruption that may lead to denial of service, hard faults, or code execution.

Detection Guidance

To detect this vulnerability, check if your RIOT-OS version is prior to 2026.04. Inspect the ATWINC15x0 driver code for the use of strcpy in _atwinc15x0_sta_set_current_ssid. Monitor network traffic for oversized SSIDs during Wi-Fi scans. Use static analysis tools to identify unsafe string operations in the driver.

Impact Analysis

This vulnerability allows nearby attackers to cause system instability or crashes by exploiting memory corruption. In severe cases, it could enable remote code execution, giving attackers control over the device. Systems using RIOT-OS versions prior to 2026.04 with the ATWINC15x0 driver and MODULE_ATWINC15X0_DYNAMIC_CONNECT enabled are at risk.

Mitigation Strategies

Upgrade RIOT-OS to version 2026.04 or later. Replace strcpy with safer alternatives like strncpy or strscpy in the ATWINC15x0 driver. Disable MODULE_ATWINC15X0_DYNAMIC_CONNECT if not required. Monitor for malformed SSIDs in Wi-Fi scan results.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-102693. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart