Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attacker to hijack execution flow, potentially resulting in remote code execution. This attack does not require authentication or user interaction, as long as the target device rebroadcasts packets on the default channel. This vulnerability fixed in 2.6.2.
An attacker sends a specially crafted mesh packet containing malformed data in protobuf format. An error in parsing such data leads to a buffer overflow on the heap, which the attacker controls. This makes it possible to overwrite critical memory structures and take over the application's execution flow. The attack is possible as long as the target device retransmits packets on the default mesh network channel.
An attacker can remotely execute arbitrary code on the victim's device (RCE) and gain unauthorized access to data or disrupt device operation, which corresponds to a high impact on system confidentiality and availability.
Meshtastic Firmware should be updated to version 2.6.2 or later, in which the vulnerability has been fixed. Details are available in the manufacturer's references: https://github.com/meshtastic/firmware/security/advisories/GHSA-33hw-xhfh-944r
Meshtastic Firmware in versions prior to 2.6.2, running on devices that retransmit packets on the default mesh network channel.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:HMeshtastic Firmware
OSMeshtastic< 2.6.2
Related vulnerabilities
Meshtastic Firmware: pominięcie uwierzytelnienia przez podmianę klucza publicznego
Meshtastic Firmware: słaba entropia i duplikacja kluczy kryptograficznych
Meshtastic: nieprawidłowe kodowanie nazwy węzła powoduje DoS przez BLE
Meshtastic is an open source mesh networking solution. In the current Meshtastic architecture, a Node is ident...
Meshtastic is an open source, off-grid, decentralized, mesh network. Meshtastic uses MQTT to communicate over ...