Skip to content
Heist/ feed
Back to feed
Medium

merbanan/rtl_433 <= 25.02 Stack-based Buffer Overflow

Type: advisorySources: OSV

merbanan/rtl_433 versions up to and including 25.02 and prior to commit 25e47f8 contain a stack-based buffer overflow vulnerability in the function parse_rfraw() located in src/rfraw.c. When processing crafted or excessively large raw RF input data, the application may write beyond the bounds of a stack buffer, resulting in memory corruption or a crash. This vulnerability can be exploited to cause a denial of service and, under certain conditions, may be leveraged for further exploitation depending on the execution environment and available mitigations.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2025-34450
Confirmed fixed CVEs
Not specified
Updated in this feed
2 Nov 2026, 22:10 UTC · Revision 1

Source evidence

merbanan/rtl_433 <= 25.02 Stack-based Buffer Overflow

core-osv · Original source

Published 18 Dec 2025, 21:15 UTC

merbanan/rtl_433 versions up to and including 25.02 and prior to commit 25e47f8 contain a stack-based buffer overflow vulnerability in the function parse_rfraw() located in src/rfraw.c. When processing crafted or excessively large raw RF input data, the application may write beyond the bounds of a stack buffer, resulting in memory corruption or a crash. This vulnerability can be exploited to cause a denial of service and, under certain conditions, may be leveraged for further exploitation depending on the execution environment and available mitigations.

osv:CVE-2025-34450
Complete source record
{
  "id": "e129595bc5f1ba52f2514122df71b16b638b745e81432ad76621aa68adffb85c",
  "url": "https://osv.dev/vulnerability/CVE-2025-34450",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "merbanan/rtl_433 <= 25.02 Stack-based Buffer Overflow",
    "summary": "merbanan/rtl_433 versions up to and including 25.02 and prior to commit 25e47f8 contain a stack-based buffer overflow vulnerability in the function parse_rfraw() located in src/rfraw.c. When processing crafted or excessively large raw RF input data, the application may write beyond the bounds of a stack buffer, resulting in memory corruption or a crash. This vulnerability can be exploited to cause a denial of service and, under certain conditions, may be leveraged for further exploitation depending on the execution environment and available mitigations.",
    "evidence": "osv:CVE-2025-34450",
    "products": [],
    "severity": "medium",
    "structured": {
      "id": "CVE-2025-34450",
      "aliases": [
        "CVE-2025-34450"
      ],
      "metrics": [
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/dd32/rtl_433",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "25e47f8"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "fixed": "25e47f8"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            },
            {
              "repo": "https://github.com/merbanan/rtl_433",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "5cae16fbc9c1c98652676ab45d7bbf7f51e6ccea"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "last_affected": "25.02"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                  },
                  {
                    "cpe": "cpe:2.3:a:rtl_433_project:rtl_433:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "last_affected": "25.02"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "25.02",
            "24.10",
            "23.11",
            "22.11",
            "21.12",
            "21.05",
            "20.11",
            "20.02",
            "19.08",
            "18.12",
            "18.05",
            "0.1",
            "0.01"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-34450.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:23.965204527Z",
      "provider": "osv",
      "references": [
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/34xxx/CVE-2025-34450.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-34450",
        "https://www.vulncheck.com/advisories/merbanan-rtl-433-stack-based-buffer-overflow",
        "https://github.com/merbanan/rtl_433/issues/3375",
        "https://github.com/dd32/rtl_433/commit/25e47f8",
        "https://github.com/merbanan/rtl_433",
        "https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-004-rtl_433-rfraw-parse-overflow.md"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-121"
        ],
        "cna_assigner": "VulnCheck",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/34xxx/CVE-2025-34450.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-34450",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 490480,
  "published_at": "2025-12-18T21:15:50.73+00:00"
}