Buffer Overflow Vulnerability in Realtek AmebaD Devices
CVE-2025-49604

5.4MEDIUM

Key Information:

Vendor

Realtek

Status
AmebaD
Vendor
CVE Published:
9 July 2025

What is CVE-2025-49604?

A buffer overflow vulnerability has been identified in Realtek AmebaD devices due to inadequate validation of fragmented Wi-Fi frames in the WLAN driver defragment function. This oversight allows attackers to exploit the overflow, potentially leading to system instability and unauthorized access. Users are advised to upgrade to the latest versions of ameba-arduino-d and ameba-rtos-d to mitigate the risk.

References

https://github.com/Ameba-AIoT/ameba-arduino-d/releases/ta...
https://github.com/Ameba-AIoT/ameba-arduino-d/pull/281
https://www.amebaiot.com/en/security-bulletin-cve-2025-49...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.