rtl_433 vulnerabilities

2 known vulnerabilities in rtl_433 from Merbanan. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  rtl_433: Stack-based Buffer Overflow

  CVE-2026-117609Oct 28, 2026Merbanan

  rtl_433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2_mc() that allows nearby attackers to write past a 7-byte stack buffer by sending more than seven valid Manchester-coded words. Attackers can transmit a crafted OOK radio si

• 7.8 High severity

  rtl_433: Out-of-bounds Write

  CVE-2025-34450Dec 18, 2025Merbanan

  merbanan/rtl_433 versions up to and including 25.02 and prior to commit 25e47f8 contain a stack-based buffer overflow vulnerability in the function parse_rfraw() located in src/rfraw.c. When processing crafted or excessively large raw RF input data, the applic