CVE Feed

    Dashboard / CVE / CVE-2025-24798

    CVE-2025-24798

    Meshtastic is an open source mesh networking solution. From 1.2.1 until 2.6.2, a packet sent to the routing module that contains want_response==true causes a crash. This can lead to a degradation of service for nodes within range of a malicious sender, or via MQTT if downlink is enabled. This vulnerability is fixed in 2.6.2.

    Published:Jul 10, 2025
    Last Modified:Aug 22, 2025
    EPS:Jul 10, 2025
    EPSS Score:0.00026
    CVSS Score:4.3

    Affected Products

    Vendor
    Meshtastic
    Product
    Firmware
    Vendor
    Meshtastic
    Product
    Meshtastic Firmware

    Exploits

    https://github.com/meshtastic/firmware/security/advisories/GHSA-4q84-546j-3mf5

    Common Weakness Enumeration

    CWE-617 Reachable Assertion

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-42566 (CVSS 7.5) — Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertis…
    CVE-2026-44359 (CVSS 10) — Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub …
    CVE-2025-55292 (CVSS 8.2) — Meshtastic is an open source mesh networking solution. In the current Meshtastic architecture, a Node is ident…
    CVE-2025-53627 (CVSS 5.3) — Meshtastic is an open source mesh networking solution. The Meshtastic firmware (starting from version 2.5) int…
    CVE-2025-55293 (CVSS 9.4) — Meshtastic is an open source mesh networking solution. Prior to v2.6.3, an attacker can send NodeInfo with a e…
    CVE-2024-47065 (CVSS 2.7) — Meshtastic is an open source mesh networking solution. Prior to 2.5.1, traceroute responses from the remote no…
    CVE-2025-53637 (CVSS 4.1) — Meshtastic is an open source mesh networking solution. The main_matrix.yml GitHub Action is triggered by the p…
    CVE-2025-52464 (CVSS 9.5) — Meshtastic is an open source mesh networking solution. In versions from 2.5.0 to before 2.6.11, the flashing p…
    CVE-2025-24797 (CVSS 9.4) — Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing inva…
    CVE-2025-21608 (CVSS 5.3) — Meshtastic is an open source mesh networking solution. In affected firmware versions crafted packets over MQTT…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High