Medium severityNVD Advisory· Published Jan 12, 2026· Updated Apr 15, 2026
CVE-2026-22212
CVE-2026-22212
Description
TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in the mcp2200gpio utility. The vulnerability is caused by unsafe use of strcpy() and strcat() functions when constructing device paths during automatic device discovery. A local attacker can exploit this by creating specially crafted filenames under /dev/usb/, leading to stack memory corruption and application crashes.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=2.1.2
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.