CVE-2023-24823

CVE-2023-24823 is a critical type confusion vulnerability affecting RIOT-OS versions prior to 2022.10, specifically within its 6LoWPAN network stack. An unauthenticated attacker can exploit this by sending a specially crafted frame, leading to an out-of-bounds write in the packet buffer. This can result in denial of service or, with careful manipulation, arbitrary code execution. The vulnerability has a CVSS score of 9.8 (Critical) due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.