Home→Vulnerabilities→CVE-2024-24335

Disclosed

CVE-2024-24335

A heap buffer overflow occurs in the dfs_v2 romfs filesystem RT-Thread through 5.0.2.

Share this vulnerability:

Exploitation Probability (EPSS)

Low Priority

0.06%

The Exploit Prediction Scoring System (EPSS) uses machine learning to estimate the probability that a vulnerability will be exploited in the wild within the next 30 days.

0% (Theoretical)100% (Certainty)

7-Day Exploitation Trend

Vulnerability Timeline

2 events

Mar 27, 2024

Vulnerability Disclosed

Published to component-level vulnerability database.

Nov 4, 2025

Last Updated

Record updated with new analysis or tags.

Threat Actor Attribution

PREMIUM INTEL

Associated Groups:Lazarus Group, APT28

Ransomware Campaigns:LockBit 3.0, BlackCat

IoCs (Indicators):14 IPs, 3 Hashes

Remediation & Mitigation

SOLUTION

Official patches and mitigation steps are available for this vulnerability.

# Update Command
apt-get update && apt-get upgrade -y specific-package
# Verify installation
dpkg -l | grep package-name

Affected Products

1 Total

rt-thread/rt-threadAll Versions

References

http://www.openwall.com/lists/oss-security/2024/03/05/1Openwall

https://github.com/RT-Thread/rt-thread/issues/8271GitHub

https://github.com/RT-Thread/rt-thread/pull/8278GitHub

https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txtGitHub

Third Party Advisory

Am I Vulnerable?

Check your domain or package.json for CVE-2024-24335 exposure.

Share This Page

Help others discover this vulnerability information

Vulnerability Details

CVSS Base Score

8.4/ 10

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Published Date

Mar 27, 2024

Last Modified

Nov 4, 2025

Need API Access?

Integrate this data into your SOAR platform.

Need Manual Validation?

Automated scanners flag false positives. Get a manual pentest validation for this CVE.