CVE catalog

CVE-2022-25051

rtl-433: CVE-2022-25051

[CVE catalog]

Severity
Medium
Source
[NVD] · [CVE record]
EPSS
0.77% · Oct 25, 2026

An Off-by-one Error occurs in cmr113_decode of rtl_433 21.12 when decoding a crafted file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrtl-433sid26.07-1fixed
Debianrtl-433forky26.07-1fixed
Debianrtl-433trixie25.02-1+deb13u1fixed
Debianrtl-433bookworm22.11-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrtl-433sourcesid21.12+git20220718+ds-2not yet assignedNot reported[1008000]
Debianrtl-433sourceforky21.12+git20220718+ds-2not yet assignedNot reported[1008000]
Debianrtl-433sourcetrixie21.12+git20220718+ds-2not yet assignedNot reported[1008000]
Debianrtl-433sourcebookworm21.12+git20220718+ds-2not yet assignedNot reported[1008000]

[Debian bug #1008000]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [rtl-433]Fixed
    Details (2)

    • 22.11-1 · amd64 · bookworm

      Fixed · Fixed: 21.12+git20220718+ds-2

      dsa · rtl-433 · debian · bookworm

    • 22.11-1 · arm64 · bookworm

      Fixed · Fixed: 21.12+git20220718+ds-2

      dsa · rtl-433 · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS]