CVE-2025-34458— wb2osz/direwolf <= 1.8.1 Reachable Assertion DoS
Quick assessment
Affected
wb2osz Dire Wolf
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dire Wolf是wb2osz个人开发者的一个软件无线电调制解调器。 Dire Wolf 1.8及之前版本存在安全漏洞，该漏洞源于APRS MIC-E解码器存在可达断言漏洞，可能导致拒绝服务。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-34458
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
wb2osz/direwolf <= 1.8.1 Reachable Assertion DoS
Source: CVE Program / CVE List V5
Vulnerability Description
wb2osz/direwolf (Dire Wolf) versions up to and including 1.8, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder function aprs_mic_e() located in src/decode_aprs.c. When processing a specially crafted AX.25 frame containing a MIC-E message with an empty or truncated comment field, the application triggers an unhandled assertion checking for a non-empty comment. This assertion failure causes immediate process termination, allowing a remote, unauthenticated attacker to cause a denial of service by sending malformed APRS traffic.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
可达断言
Source: CVE Program / CVE List V5
Vulnerability Title
Dire Wolf 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dire Wolf是wb2osz个人开发者的一个软件无线电调制解调器。 Dire Wolf 1.8及之前版本存在安全漏洞，该漏洞源于APRS MIC-E解码器存在可达断言漏洞，可能导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-34458
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-34458
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-34458 (2)
-
-
wb2osz/direwolf <= 1.8.1 Reachable Assertion DoS | Advisories | VulnCheck third-party-advisory
IV. Related Vulnerabilities
Same weakness: CWE-617
-
CVE-2026-14957
FIPS mode assertion failure via malicious CERT payload -
CVE-2026-82590
Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion -
CVE-2026-19401
Remote UDP DoS by sending multiple DNS Cookie options -
CVE-2026-53532
OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted -
CVE-2026-78186
Open5GS HSS hss-cx-path.c assertion
V. Comments for CVE-2025-34458
No comments yet