PT-2026-52552 · Tomojitakasu · Rtklib

Fuzzinglabs · Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-56789

NVD

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb function in src/rinex.c that allows attackers to trigger memory corruption by failing to clamp satellite count values from RINEX epoch headers. Attackers can craft malicious RINEX files declaring more than 64 satellites per epoch to cause heap buffer overflow writes and out-of-bounds stack reads, crashing RTKLIB-based applications including rnx2rtkp and RTKPOST.

Exploit

Correção

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-122

Identificadores relacionados

CVE-2026-56789

Produtos afetados

Rtklib

Referências · 3

• 🔥 https://github.com/tomojitakasu/RTKLIB/issues/796 · Exploit
• https://vulncheck.com/advisories/rtklib-heap-buffer-overflow-and-stack-read-via-oversized-rinex-epoch-satellite-count · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-56789 · Nota de Segurança