Description
wb2osz/direwolf (Dire Wolf) versions up to and including 1.8.1, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder function aprs_mic_e() located in src/decode_aprs.c. When processing a specially crafted AX.25 frame containing a MIC-E message with an empty or truncated comment field, the application triggers an unhandled assertion checking for a non-empty comment. This assertion failure causes immediate process termination, allowing a remote, unauthenticated attacker to cause a denial of service by sending malformed APRS traffic.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
wb2osz Dire Wolf
Default version status: unaffected
0 to ≤ 1.8.1affected3658a878920803bbb69a4567579dcc4d6cb80a92unaffected
pkg:github/wb2osz/direwolfReferences
- https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-010-direwolf-stack-buffer-overflow-kiss-frame.md ↗
- https://github.com/wb2osz/direwolf/issues/618 ↗
- https://github.com/wb2osz/direwolf/commit/3658a87 ↗
- https://www.vulncheck.com/advisories/wb2osz-direwolf-reachable-assertion-dos ↗