Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2025-49604

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Realtek Ameba-AIoT ameba-arduino-d和Realtek Ameba-AIoT ameba-rtos-d都是中国瑞昱半导体（Realtek）公司的一个物联网开发板。 Realtek Ameba-AIoT ameba-arduino-d和Realtek Ameba-AIoT ameba-rtos-d存在安全漏洞，该漏洞源于WLAN驱动碎片处理不当，可能导致堆缓冲区溢出。

AI Predicted 8.1 Difficulty: Moderate EPSS 0.32% · P24

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-49604

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
For Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba-arduino-d before version 3.1.9 and ameba-rtos-d before commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a on 2025/07/03. In the WLAN driver defragment function, lack of validation of the size of fragmented Wi-Fi frames may lead to a heap-based buffer overflow.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Realtek Ameba-AIoT ameba-arduino-d和Realtek Ameba-AIoT ameba-rtos-d 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Realtek Ameba-AIoT ameba-arduino-d和Realtek Ameba-AIoT ameba-rtos-d都是中国瑞昱半导体（Realtek）公司的一个物联网开发板。 Realtek Ameba-AIoT ameba-arduino-d和Realtek Ameba-AIoT ameba-rtos-d存在安全漏洞，该漏洞源于WLAN驱动碎片处理不当，可能导致堆缓冲区溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2025-49604

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-49604

请登录查看更多情报信息。

Other References for CVE-2025-49604 (1)

Same Patch Batch · n/a · 2025-07-09 · 9 CVEs total

CVE-2025-7207 3.3 LOW mruby nregs codegen.c scope_new heap-based overflow
CVE-2025-44177 White Star Software Protop 安全漏洞
CVE-2025-44525 Texas Instruments CC2652RB LaunchPad SimpleLink 安全漏洞
CVE-2025-44526 Realtek RTL8762EKF-EVB RTL8762E SDK 安全漏洞
CVE-2025-53645 Zimbra Collaboration Suite 安全漏洞
CVE-2025-52364 Tenda CP3 Pro 安全漏洞
CVE-2025-52357 C-Data FD602GW-DX-R410 Fiber Router 安全漏洞
CVE-2021-27961 Evasys 安全漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2025-49604

No comments yet

Leave a comment