CVE-2026-117609
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
59/100
Published: 2026-10-28
Modified: 2026-10-28
First seen: 2026-10-29
Status: active
Attack Surface
Adjacent
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Adjacent
AC:
Low
PR:
None
UI:
None
AT:
None
VC:
None
VI:
Low
VA:
High
Description
rtl_433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2_mc() that allows nearby attackers to write past a 7-byte stack buffer by sending more than seven valid Manchester-coded words. Attackers can transmit a crafted OOK radio signal or supply a crafted signal file to crash rtl_433 and corrupt stack memory, enabling control-flow hijacking on builds without stack canaries.