CVE-2025-34450

Katalog CVE

CVSS 7.8 · High EPSS 0,23%

Kerentanan Stack-based Buffer Overflow pada rtl 433 project rtl 433. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

merbanan/rtl_433 versions up to and including 25.02 and prior to commit 25e47f8 contain a stack-based buffer overflow vulnerability in the function parse_rfraw() located in src/rfraw.c. When processing crafted or excessively large raw RF input data, the application may write beyond the bounds of a stack buffer, resulting in memory corruption or a crash. This vulnerability can be exploited to cause a denial of service and, under certain conditions, may be leveraged for further exploitation depending on the execution environment and available mitigations.

Rincian

Terbit di NVD

18 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow
CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/dd32/rtl_433/commit/25e47f8 patch
• https://github.com/merbanan/rtl_433/issues/3375 exploit · issue tracking · patch
• https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-004-rtl_433-rfraw-parse-overflow.m... exploit · advisory pihak ketiga
• https://www.vulncheck.com/advisories/merbanan-rtl-433-stack-based-buffer-overflow advisory pihak ketiga