编号撤回

Realtek Ameba-AIoT ameba-arduino-d and Realtek Ameba-AIoT ameba-rtos-d are both an IoT development board from Realtek Semiconductor Realtek, China. This CVE number has been withdrawn...

CVE-2025-49604: Heap-based Buffer Overflow

For Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba-arduino-d before version 3.1.9 and ameba-rtos-d before commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a on 2025/07/03. In the WLAN driver defragment function, lack of validation of the size of fragmented...

PT-2025-28941

Name of the Vulnerable Software and Affected Versions: Ameba-AIoT ameba-arduino-d versions prior to 3.1.9 ameba-rtos-d versions prior to commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a Description: A heap-based buffer overflow exists in the WLAN driver defragment function due to a lack of...