This vulnerability in RT-Thread up to version 5.0.2 involves a stack-based buffer overflow in the recvmsg function of the ls1c CAN Handler component (bsp/loongson/ls1cdev/libraries/ls1c_can.h). The issue requires local access to exploit and can result in significant impact due to the buffer overflow. Although an exploit is publicly available, the vendor has not issued any fix or advisory. The CVSS 4.0 vector indicates low attack complexity and privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to a stack-based buffer overflow, potentially allowing an attacker with local access to compromise the affected system's confidentiality, integrity, and availability. Given the high CVSS score (8.5), the impact is considered severe. No known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should restrict local access to affected systems and monitor for any updates from the vendor regarding patches or mitigations.