Critical severity9.8NVD Advisory· Published Dec 9, 2020· Updated Jun 17, 2026

CVE-2020-17529

Description

Out-of-bounds Write vulnerability in TCP Stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying and invalid fragmentation offset value specified in the IP header. This is only impacts builds with both CONFIG_EXPERIMENTAL and CONFIG_NET_TCP_REASSEMBLY build flags enabled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apache/Nuttx3 versions
cpe:2.3:a:apache:nuttx:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apache:nuttx:*:*:*:*:*:*:*:*range: <=9.1.0
- cpe:2.3:a:apache:nuttx:10.0.0:*:*:*:*:*:*:*
- (no CPE)range: <=9.1.0, <=10.0.0
Apache Software Foundation/Apache NuttX (incubating)v5
Range: unspecified

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2020/12/09/5nvdMailing ListThird Party Advisory
lists.apache.org/thread.html/r4d71ae3ab96b589835b94ba7ac4cb88a704e7307bceefeab749366f3%40%3Cdev.nuttx.apache.org%3EnvdMailing ListVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000