Update: CVE-2026-22212 - TinyOS <= 2.1.2 stack-based buffer overflow in mcp2200gpio

CVE ID : CVE-2026-22212 Published : Jan. 12, 2026, 11:15 p.m. | 1 hour, 35 minutes ago Description : TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in the mcp2200gpio utility. The vulnerability is caused by unsafe use of strcpy() and strcat() functions when constructing device paths during automatic device discovery. A local attacker can exploit this by creating specially crafted filenames under /dev/usb/, leading to stack memory corruption and application crashes. Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor