1. Home
  2. CVE Database
  3. CVE-2025-24797
CRITICAL · 9.4

CVE-2025-24797

Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attack...

Vulnerability Description

Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attacker to hijack execution flow, potentially resulting in remote code execution. This attack does not require authentication or user interaction, as long as the target device rebroadcasts packets on the default channel. This vulnerability fixed in 2.6.2.

CVSS Score

9.4

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
HIGH

Affected Products

VendorProductVersions
MeshtasticMeshtastic Firmware< 2.6.2

Related Weaknesses (CWE)

CWE-119CWE-122

References

FAQ

What is CVE-2025-24797?

CVE-2025-24797 is a vulnerability with a CVSS score of 9.4 (CRITICAL). Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attack...

How severe is CVE-2025-24797?

CVE-2025-24797 has been rated CRITICAL with a CVSS base score of 9.4/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2025-24797?

Check the references section above for vendor advisories and patch information. Affected products include: Meshtastic Meshtastic Firmware.