The CVE describes a stack-based buffer overflow in the CAN_Receive routine of RT‑Thread’s SWM341_CSL library, located in bsp/synwit/libraries/SWM341_CSL/CMSIS/DeviceSupport/SWM341.h. The flaw is triggered by a crafted CAN message sent over the local controller area network, allowing an attacker with local access to corrupt the stack, overwrite return addresses or local variables, and achieve arbitrary code execution or cause a system crash. This vulnerability aligns with CWE‑119 and CWE‑121.

All RT‑Thread firmware releases up to version 5.0.2 that contain the SWM341_CSL library are affected. The vulnerability resides in the SWM341_CSL component that is compiled into devices employing the SWM341 CAN controller. Devices that expose a local CAN interface are therefore at risk. Firmware that has been upgraded beyond 5.0.2, or that has been built without the SWM341_CSL library, does not contain the vulnerable call.

The CVSS base score of 8.5 classifies the issue as high severity, and the EPSS score of less than 1 % indicates that large‑scale exploitation is currently unlikely, although a public exploit has already been released. Because the flaw requires local access to the CAN bus, attackers must have physical or administrative presence near the device. The vulnerability is not listed in the CISA KEV catalog, so no formal warning exists for these products.