MEDIUM

CVE-2026-56789

Rtklib Rtklib 2026-06-25 CVSS v3.1

CVSS

6.5

Description

RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb function in src/rinex.c that allows attackers to trigger memory corruption by failing to clamp satellite count values from RINEX epoch headers. Attackers can craft malicious RINEX files declaring more than 64 satellites per epoch to cause heap buffer overflow writes and out-of-bounds stack reads, crashing RTKLIB-based applications including rnx2rtkp and RTKPOST.

Weakness (CWE)

CWE-122 Heap-based Buffer Overflow

EPSS Score

0.42%

Probability of exploitation in next 30 days

36.2th percentile

References

https://github.com/tomojitakasu/RTKLIB/issues/796 Exploit, Issue Tracking, Third Party Advisory https://www.vulncheck.com/advisories/rtklib-heap-buffer-overflow-and-stack-read-via-oversized-rinex-epoch-satellite-count Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE