Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

For Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba-arduino-d before version 3.1.9 and ameba-rtos-d before commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a on 2025/07/03. In the WLAN driver defragment function, lack of validation of the size of fragmented Wi-Fi frames may lead to a heap-based buffer overflow.

CVE-2025-49604 is a medium-severity heap-based buffer overflow vulnerability affecting Realtek AmebaD devices, specifically in the WLAN driver defragmentation function. The vulnerability exists in the Ameba-AIoT ameba-arduino-d firmware versions prior to 3.1.9 and ameba-rtos-d versions before commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a, disclosed on July 3, 2025. The root cause is the lack of validation of the size of fragmented Wi-Fi frames during the defragmentation process. When fragmented Wi-Fi frames are processed, the driver fails to properly check the size before copying data into a heap buffer, which can lead to a heap-based buffer overflow (CWE-122). This type of overflow can corrupt adjacent memory, potentially allowing an attacker to execute arbitrary code or cause denial of service by crashing the device. The CVSS v3.1 base score is 5.4, indicating a medium severity, with an attack vector of network (AV:N), low attack complexity (AC:L), requiring low privileges (PR:L), no user interaction (UI:N), unchanged scope (S:U), and limited impact on confidentiality and integrity (C:L/I:L) but no impact on availability (A:N). No known exploits are currently reported in the wild, and no official patches or updates have been linked yet. The vulnerability affects IoT devices using Realtek AmebaD chipsets, which are commonly embedded in various smart devices and industrial IoT applications. Because the vulnerability is exploitable remotely over the network without user interaction, it poses a risk for attackers to compromise affected devices within wireless range or connected networks. However, exploitation requires at least low privileges, which may limit the attack surface somewhat.

Detailed information about CVE-2025-49604: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-49604: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-49604: n/a

Threats Tagged 'cve-2025-49604'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-49604'

Lead Pen Test Professional