Medium 6.9Published Dec 18, 2025

CVE-2025-34450merbanan/rtl_433 <= 25.02 Stack-based Buffer Overflow

Updated under an hour ago (Oct 27, 2026, 8:30 PM ET)

Does this affect you?

It affects merbanan rtl_433 and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for merbanan rtl_433

Exploited in the last 30 days

merbanan/rtl_433 versions up to and including 25.02 and prior to commit 25e47f8 contain a stack-based buffer overflow vulnerability in the function parse_rfraw() located in src/rfraw.c. When processing crafted or excessively large raw RF input data, the application may write beyond the bounds of a stack buffer, resulting in memory corruption or a crash. This vulnerability can be exploited to cause a denial of service and, under certain conditions, may be leveraged for further exploitation depending on the execution environment and available mitigations.

CVSS: 6.9 MEDIUM (v4.0, CNA)CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Weakness (CWE): CWE-121
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulnCheck
NVD analysis: Analyzed
Record last updated: May 13, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

merbanan rtl_433 merbanan:rtl_433 (from the name)	through 25.02; 25e47f8932f0401392ef1d3c8cc9ed5595bc894a not affected	CNA record
rtl_433_project rtl_433 rtl_433_project:rtl_433	through 25.02	NVD

References

References

https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-004-rtl_433-rfraw-parse-overflow.md	technical-description, exploit, third-party-advisory
https://github.com/merbanan/rtl_433/issues/3375	issue-tracking, exploit, patch
https://github.com/dd32/rtl_433/commit/25e47f8	patch
https://www.vulncheck.com/advisories/merbanan-rtl-433-stack-based-buffer-overflow	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.