merbanan/rtl_433 <= 25.02 Stack-based Buffer Overflow

merbanan/rtl_433 versions up to and including 25.02 and prior to commit 25e47f8 contain a stack-based buffer overflow vulnerability in the function parse_rfraw() located in src/rfraw.c. When processing crafted or excessively large raw RF input data, the application may write beyond the bounds of a stack buffer, resulting in memory corruption or a crash. This vulnerability can be exploited to cause a denial of service and, under certain conditions, may be leveraged for further exploitation depending on the execution environment and available mitigations.

N/A

栈缓冲区溢出

rtl_433 安全漏洞

rtl_433是Benjamin Larsson个人开发者的一种通用数据接收器。用于解码来自 Ism 频段（和其他频率）设备的无线电传输的程序。 rtl_433 25.02及之前版本和25e47f8之前版本存在安全漏洞，该漏洞源于parse_rfraw函数存在栈缓冲区溢出，可能导致内存损坏或崩溃。

N/A

N/A