VendorsMeshtasticmeshtastic_firmwareany version
Vulnerabilities

Meshtastic Meshtastic Firmware any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

14CVEs
CVE-2025-24797
Meshtastic incorrectly hands malformed packets leads to controlled buffer overflow
Published 2025-04-14 · Analyzed
9.8EPSS 0.009
CVE-2024-47078
Meshtastic firmware Authentication/Authorization Bypass via MQTT
Published 2024-09-25 · Analyzed
9.8EPSS 0.005
CVE-2025-55293
Meshtastic allows crafting of specific NodeInfo packets that overwrite any publicKey saved in the NodeDB
Published 2025-08-18 · Analyzed
9.8EPSS 0.004
CVE-2025-52464
Meshtastic Repeated Public and Private Keypairs
Published 2025-06-19 · Analyzed
9.5EPSS 0.006
CVE-2025-55292
In Meshtastic, an attacker can spoof licensed amateur flag for a node
Published 2026-01-27 · Analyzed
8.2EPSS 0.001
CVE-2025-53637
Meshtastic allows Command Injection in GitHub Action
Published 2025-07-10 · Analyzed
8.0EPSS 0.003
CVE-2024-45038
Device crash via malformed MQTT packet when downlink is enabled in Meshtastic device firmware
Published 2024-08-27 · Analyzed
7.5EPSS 0.006
CVE-2026-42566
Meshtastic: Malformed UTF-8 in User.long_name broadcast over LoRa causes mesh-wide client decode failure
Published 2026-07-19 · Analyzed
7.5EPSS 0.005
CVE-2024-51500
Failure to check for packets from the broadcast address allows potential DDoS amplification attack in Meshtastic firmware
Published 2024-11-04 · Analyzed
7.5EPSS 0.004
CVE-2025-24798
Meshtastic crashes via an unimplemented routing module reply
Published 2025-07-10 · Analyzed
6.5EPSS 0.004
CVE-2024-47065
Traceroute_APP responses are not rate-limited.
Published 2025-07-11 · Analyzed
6.5EPSS 0.002
CVE-2024-47079
Unauthorized usage of remote hardware module because of missing channel verification
Published 2024-10-07 · Analyzed
6.4EPSS 0.002
CVE-2025-21608
Forged packets over MQTT can show up in direct messages in Meshtastic firmware
Published 2025-02-18 · Analyzed
5.3EPSS 0.004
CVE-2025-53627
Meshtastic firmware allows forged DMs with no PKC to show up as encrypted
Published 2025-12-29 · Analyzed
5.3EPSS 0.002