Ecosystem	Package	Version

Find vulnerabilities. Fix fast with AI.

Search components by package, version, or CVE to get started.

Vulnerabilities

CVE-2025-34450

merbanan/rtl_433 versions up to and including 25.02 and prior to commit 25e47f8 contain a stack-based buffer overflow vulnerability in the function parse_rfraw() located in src/rfraw.c. When processing crafted or excessively large raw RF input data, the application may write beyond the bounds of a stack buffer, resulting in memory corruption or a crash. This vulnerability can be exploited to cause a denial of service and, under certain conditions, may be leveraged for further exploitation depending on the execution environment and available mitigations.

Published Dec 19, 2025

https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-004-rtl_433-rfraw-parse-overflow.md

CVSS ScoreHigh

7.8

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

CVE-2025-34450

Published Dec 19, 2025

https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-004-rtl_433-rfraw-parse-overflow.md

CVSS ScoreHigh

7.8

Ecosystem	Package	Version


rpm	rtl-433	21.12-4.20220401git8228f0d.el8
rpm	rtl-433	21.12-4.20220401git8228f0d.el9
rpm	rtl-433	22.11-1.20230714git37b804c.el9
rpm	rtl-433	23.11-1.20231218git60bdd62.el9
rpm	rtl-433	23.11-1.20240826gitf0ba153.el10_0
rpm	rtl-433	23.11-1.20240826gitf0ba153.el8
rpm	rtl-433	23.11-1.20240826gitf0ba153.el9
rpm	rtl-433	25.02-1.20250302gitd422a7e.el10_1

1-8 of 8

CVE-2025-34450 | Components Impacted | Sonatype Guide | Sonatype Guide