Apache NuttX Flaw Allows Remote Attackers to Crash Embedded Systems

Cyberpress • January 2, 2026

Share: View original

The vulnerability stems from a “Use After Free” error located in the file system's rename function (fs/vfs/fs_rename). NuttX is a popular RTOS ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Apache NuttX Vulnerability Allows Remote System Crashes A use-after-free vulnerability in Apache NuttX RTOS has been disclosed, allowing remote attackers to crash embedded systems. This flaw, tracked as CVE-2025-48769, affects multiple versions of NuttX and poses risks for users running network-exposed services. The vulnerability was publicly disclosed on December 31, 2025. 3 sources 35

Extracted Entities

Platforms (1)