CVE-2025-24797

Name of the Vulnerable Software and Affected Versions Meshtastic versions prior to 2.6.2

Description Meshtastic is an open source mesh networking solution. A flaw in processing mesh packets with invalid protobuf data can lead to an attacker-controlled buffer overflow, potentially allowing an attacker to hijack execution flow and achieve remote code execution. This attack does not require authentication or user interaction, provided the target device rebroadcasts packets on the default channel.

Recommendations Update to version 2.6.2 to address the issue.