CVE-2026-22211
MediumCVSS 5.1Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A global buffer overflow vulnerability in TinyOS up to version 2.1.2 exists in the printfUART formatted output implementation used in the ZigBee / IEEE 802.15.4 networking stack. The implementation formats output into a fixed-size global buffer and concatenates strings for %s specifiers using strcat() without checking remaining capacity, causing writes past the end of debugbuf.
Risk Assessment
An attacker can cause denial of service, unintended behavior, or information disclosure by corrupting adjacent global state or UART output.
Recommendation
Upgrade TinyOS to a version newer than 2.1.2 or apply available security patches. Also restrict access to UART interfaces and the ZigBee stack.
Original NVD description (English source)
TinyOS versions up to and including 2.1.2 contain a global buffer overflow vulnerability in the printfUART formatted output implementation used within the ZigBee / IEEE 802.15.4 networking stack. The implementation formats output into a fixed-size global buffer and concatenates strings for %s format specifiers using strcat() without verifying remaining buffer capacity. When printfUART is invoked with a caller-controlled string longer than the available space, the unbounded sprintf/strcat sequence writes past the end of debugbuf, resulting in global memory corruption. This can cause denial of service, unintended behavior, or information disclosure via corrupted adjacent global state or UART output.