PT-2026-52549 · Tomojitakasu · Rtklib

Fuzzinglabs · Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-56786

NVD

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode type1033 function that fails to clamp length counters to destination buffer size, allowing up to 191-byte overflow into fixed 64-byte descriptor fields. An attacker controlling an NTRIP or serial RTCM3 correction stream can craft a valid CRC-bearing type-1033 message to corrupt adjacent rtcm t object members, potentially achieving arbitrary code execution or denial of service.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2026-56786

Produtos afetados

Rtklib

Referências · 3

• 🔥 https://github.com/tomojitakasu/RTKLIB/issues/799 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-56786 · Nota de Segurança
• https://vulncheck.com/advisories/rtklib-out-of-bounds-write-in-decode-type1033-via-crafted-rtcm3-message · Nota