Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2025-34457— wb2osz/direwolf <= 1.8.1 Stack-based Buffer Overflow DoS

Quick assessment

Affected
wb2osz Dire Wolf
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Dire Wolf是wb2osz个人开发者的一个软件无线电调制解调器。 Dire Wolf 1.8及之前版本存在安全漏洞，该漏洞源于kiss_rec_byte函数存在栈缓冲区溢出，可能导致栈内存损坏或应用程序崩溃。

AI Predicted 7.5 Difficulty: Easy EPSS 0.50% · P41

Possible ATT&CK Techniques 1 AI

T1498 · Network Denial of Service
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-34457

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
wb2osz/direwolf <= 1.8.1 Stack-based Buffer Overflow DoS
Source: CVE Program / CVE List V5
Vulnerability Description
wb2osz/direwolf (Dire Wolf) versions up to and including 1.8, prior to commit 694c954, contain a stack-based buffer overflow vulnerability in the function kiss_rec_byte() located in src/kiss_frame.c. When processing crafted KISS frames that reach the maximum allowed frame length (MAX_KISS_LEN), the function appends a terminating FEND byte without reserving sufficient space in the stack buffer. This results in an out-of-bounds write followed by an out-of-bounds read during the subsequent call to kiss_unwrap(), leading to stack memory corruption or application crashes. This vulnerability may allow remote unauthenticated attackers to trigger a denial-of-service condition.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Vulnerability Title
Dire Wolf 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dire Wolf是wb2osz个人开发者的一个软件无线电调制解调器。 Dire Wolf 1.8及之前版本存在安全漏洞，该漏洞源于kiss_rec_byte函数存在栈缓冲区溢出，可能导致栈内存损坏或应用程序崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
wb2osz Dire Wolf 0 ~ 1.8.1 -

II. Public POCs for CVE-2025-34457

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-34457

请登录查看更多情报信息。

Vendor Advisories for CVE-2025-34457 (2)

IV. Related Vulnerabilities

Same product: Dire Wolf
Same vendor: wb2osz
Same weakness: CWE-121

V. Comments for CVE-2025-34457

No comments yet

Leave a comment