Rtl_433 (<= 25.12) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/rtl_433--25.12/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 28 Oct 2026 08:26:39 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgrtl_433: Stack-based buffer overflow in proflame2_mc (CVE-2026-117609)https://feed.craftedsignal.io/briefs/2026-10-rtl433-buffer-overflow/Wed, 28 Oct 2026 08:26:39 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-rtl433-buffer-overflow/rtl_433 versions up to 25.12 contain a stack-based buffer overflow in the proflame2_mc function that allows attackers to trigger memory corruption via malicious OOK radio signals or input files.A stack-based buffer overflow vulnerability exists in the proflame2_mc() function of rtl_433 (all versions through 25.12). The issue occurs when the application processes more than seven Manchester-coded words. An attacker within radio range can transmit a crafted On-Off Keying (OOK) signal or provide a malformed signal file to trigger the overflow. This can result in application crashes or, if the binary is compiled without stack canaries, potential control-flow hijacking.

Impact

Successful exploitation allows for the crash of the rtl_433 service or potential arbitrary code execution, depending on the compiler protections enabled for the specific deployment.

Recommendation

  • Upgrade rtl_433 to a version that patches the proflame2_mc() function, or monitor the project repository for the official security release addressing this vulnerability.
  • Audit current deployments to determine if they are compiled with stack protection (e.g., -fstack-protector or -fstack-protector-strong) to mitigate the risk of arbitrary code execution.
  • Restrict the input sources for rtl_433 if possible, particularly by verifying the integrity of signal capture files before processing them.
]]>highadvisorybuffer-overflowvulnerabilityrtl_433