Live › vulnerability › CVE-2026-117609
Go to dashboardrtl_433, a tool that decodes radio signals from home sensors, has a stack buffer overflow in its proflame2_mc() decoder. A nearby attacker sending a crafted OOK radio signal, or a crafted signal file, can crash it and may hijack control flow on builds without stack canaries.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 03:31 UTC. All times on this page are UTC.
Systems that run rtl_433 through version 25.12 to decode radio signals, including ones that process signal files from untrusted sources. The sources do not describe a default-on service, so machines that do not run rtl_433 are not exposed. Builds with stack canaries and hardening make hijacking harder but do not remove the crash risk.
No product ranges from the sources yet.
rtl_433 -V to see the installed version and compare it with 25.1225.12Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
rtl_433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2_mc() that allows nearby attackers to write past a 7-byte stack buffer by sending more than seven valid Manchester-coded words. Attackers can transmit a crafted OOK radio signal or supply a crafted signal file to crash rtl_433 and corrupt stack memory, enabling control-flow hijacking on builds without stack canaries.
This page as .md · .json · in your agent: get_signal("CVE-2026-117609")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.