CVE-2020-15350

CVE-2020-15350 describes a critical buffer overflow vulnerability in the base64 decoder of RIOT 2020.04. The base64_estimate_decode_size() function incorrectly calculates the required buffer capacity, leading to an underestimation that can be exploited by crafting malicious base64 input. This vulnerability has a CVSS score of 9.8 (CRITICAL), indicating it can be exploited remotely with low complexity, leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.