CyberSecBulletin

Merbanan vulnerabilities

We track 2 vulnerabilities in Merbanan products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.

2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score

Latest Merbanan vulnerabilities

  • 7.1 High severity

    rtl_433: Stack-based Buffer Overflow

    CVE-2026-117609Merbanan

    rtl_433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2_mc() that allows nearby attackers to write past a 7-byte stack buffer by sending more than seven valid Manchester-coded words. Attackers can transmit a crafted OOK radio si

  • 7.8 High severity

    rtl_433: Out-of-bounds Write

    CVE-2025-34450Merbanan

    merbanan/rtl_433 versions up to and including 25.02 and prior to commit 25e47f8 contain a stack-based buffer overflow vulnerability in the function parse_rfraw() located in src/rfraw.c. When processing crafted or excessively large raw RF input data, the applic