PT-2022-18413
CVE-2022-27419
·
Published
2022-04-12
·
Updated
2026-10-31
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
rtl 433 version 21.12
Description
The issue is related to a stack overflow in the
acurite 00275rm decode function located at /devices/acurite.c. This allows attackers to cause a Denial of Service (DoS) via a crafted file.Recommendations
For rtl 433 version 21.12, consider disabling the
acurite 00275rm decode function as a temporary workaround until a patch is available. Restrict access to crafted files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾