Stack-Based Buffer Overflow in rtl_433 Product by merbanan

CVE-2026-117609

What is CVE-2026-117609?

rtl_433, an open-source software tool, is affected by a stack-based buffer overflow vulnerability in the proflame2_mc() function. This flaw allows nearby attackers to manipulate a 7-byte stack buffer by sending an excessive number of valid Manchester-coded words. By transmitting a specially crafted OOK radio signal or using a manipulated signal file, attackers can potentially crash the application and tamper with stack memory, paving the way for control-flow hijacking in versions that lack stack canaries.

References