Critical severity9.1NVD Advisory· Published Dec 9, 2020· Updated Jun 17, 2026

CVE-2020-17528

Description

Out-of-bounds Write vulnerability in TCP stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying arbitrary urgent data pointer offsets within TCP packets including beyond the length of the packet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apache/Nuttx3 versions
cpe:2.3:a:apache:nuttx:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apache:nuttx:*:*:*:*:*:*:*:*range: <=9.1.0
- cpe:2.3:a:apache:nuttx:10.0.0:*:*:*:*:*:*:*
- (no CPE)range: <=9.1.0, <=10.0.0
Apache Software Foundation/Apache NuttX (incubating)v5
Range: unspecified

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2020/12/09/4nvdMailing ListThird Party Advisory
lists.apache.org/thread.html/r7f4215aba288660b41b7e731b6262c8275fa476e91e527a74d2888ea%40%3Cdev.nuttx.apache.org%3EnvdMailing ListVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000