CVE-2026-24801 | Ralim IronOS up to 2.23-rc2 source stack-based overflow

A vulnerability was found in Ralim IronOS up to 2.23-rc2. It has been declared as critical. This vulnerability affects unknown code of the file source/Core/BSP/Pinecilv2/bl_mcu_sdk/components/ble/ble_stack/common/tinycrypt/source. Such manipulation leads to stack-based buffer overflow.

This vulnerability is referenced as CVE-2026-24801. The attack can be executed directly on the physical device. No exploit is available.

It is recommended to upgrade the affected component.