CVE-2026-14629CWE-369CWE-404

RT-Thread Parameter lwp_syscall.c sys_ioctl divide by zero

Medium · published July 4, 2026

CVSS v4.0
5.3
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

A flaw has been found in RT-Thread up to 5.2.2. Affected is the function read/write/sys_ioctl of the file components/lwp/lwp_syscall.c of the component Parameter Handler. Executing a manipulation can lead to divide by zero. The attack may be launched remotely. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00533 · 44.2th percentile
Weaknesses
CWE-369 · Divide By Zero; CWE-404 · Improper Resource Shutdown or Release
Published
2026-07-04T13:15Z
EPSS history
Timeline
  • 04 JUL 13:15Z
    RT-Thread Parameter lwp_syscall.c sys_ioctl divide by zero
    cvelistv5