Threat Investigation
Request a demo

CVE-2025-49604

Medium

Description

For Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba-arduino-d before version 3.1.9 and ameba-rtos-d before commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a on 2025/07/03. In the WLAN driver defragment function, lack of validation of the size of fragmented Wi-Fi frames may lead to a heap-based buffer overflow.

SeverityMedium
CVSS5.4
Exploit probability—
ProductRealtek Ameba-arduino-d
PublishedJul 9, 2025
First seenJul 9, 2025
Weakness typeCWE-122CWE-122

How to fix

Update
  • Realtek ameba-arduino-d3.1.9 or later
  • Realtek ameba-rtos-dc2bfd8216a1cbc19ad2ab5f48f372ecea756d67a or later

Affected products

ProductAffected versionsFixed in
Realtek ameba-arduino-dNo range specified3.1.9
Realtek ameba-rtos-dNo range specifiedc2bfd8216a1cbc19ad2ab5f48f372ecea756d67a

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.