Stack-based Buffer Overflow in Kenwood DMX958XR Product by Vendor Kenwood

CVE-2025-8653

What is CVE-2025-8653?

The Kenwood DMX958XR features a vulnerability within the JKRadioService that can be exploited by network-adjacent attackers. This vulnerability is caused by insufficient validation of user-supplied data lengths before copying them into a fixed-length stack-based buffer. As a result, an attacker can execute arbitrary code, potentially gaining root access on the affected device without requiring authentication. Users are advised to take precautions to mitigate this risk, as exploitation could lead to severe consequences.

References