CVE-2025-34450 is a stack-based buffer overflow vulnerability in the parse_rfraw() function of the merbanan rtl_433 project, affecting versions up to 25.02 and prior to commit 25e47f8. The flaw arises from improper handling of raw RF input data that is crafted or excessively large, leading to writes beyond the bounds of a stack buffer. This can cause memory corruption or crashes, resulting in denial of service. Under certain conditions, this vulnerability might be leveraged for further exploitation depending on the execution environment and existing mitigations. The vulnerability is classified under CWE-121 (Stack-based Buffer Overflow) and has a CVSS 4.0 score of 6.9 (medium severity). There is no vendor advisory or patch information provided, and the product is not a cloud service.

Exploitation of this vulnerability can cause denial of service through application crashes or memory corruption. Depending on the execution environment and mitigations, it may also enable further exploitation. No known exploits in the wild have been reported. The impact is rated medium severity with a CVSS score of 6.9.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, avoid processing untrusted or malformed raw RF input data if possible.