CVE-2024-32018 is a critical buffer overflow vulnerability in the RIOT operating system. This flaw stems from missing input validation when assertions are disabled in non-debug builds, allowing attackers to potentially overwrite memory. The RIOT OS vulnerability can lead to denial of service or, more seriously, arbitrary code execution if exploited. This occurs because the nimble_scanlist_update() function relies on assertions to check the length of input, which is bypassed when compiled without debugging. Despite a CVSS score of 8.8, the SOCRadar Vulnerability Risk Score (SVRS) is currently 30, suggesting a lower immediate risk than CVSS indicates, potentially due to the lack of active exploitation observed at the time of analysis. However, the possibility for significant impact necessitates prompt attention and manual input validation as a workaround as there is no patch available. Addressing this security vulnerability is important to protect devices running RIOT OS from potential attacks.