PT-2026-4858 · Gmrtd · Gmrtd

Ramrunner · Published 2026-01-27 · Updated 2026-03-04 · CVE-2026-24738

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions gmrtd versions prior to 0.17.2

Description The gmrtd Go library contains a flaw where the ReadFile function accepts TLVs (Tag-Length-Value) with lengths up to 4GB. This can lead to excessive resource consumption, including memory and CPU cycles, potentially causing slowdowns or making the receiving thread unresponsive. A malicious NFC (Near Field Communication) chip can exploit this by sending dummy bytes in chunks, overwhelming the system. This issue affects projects using the gmrtd library to read files from NFCs. The vulnerability arises from the unconstrained resource consumption during the processing of large TLVs, specifically when reading data in 256-byte chunks.

Recommendations Update to gmrtd version 0.17.2 or later.

Exploit

Fix

DoS

Resource Exhaustion

Allocation of Resources Without Limits

Weakness Enumeration

CWE-400

CWE-770

Related Identifiers

CVE-2026-24738

GHSA-J49H-6577-5XWQ

GO-2026-4379

SUSE-SU-2026:0403-1

Affected Products

Gmrtd

References · 91

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24738.json · Exploit
• https://github.com/gmrtd/gmrtd/security/advisories/GHSA-j49h-6577-5xwq · Vendor Advisory
• https://github.com/gmrtd/gmrtd/commit/54469a95e5a20a8602ac1457b2110bfeb80c8891 · Patch
• https://osv.dev/vulnerability/GHSA-j49h-6577-5xwq · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0403-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24738 · Security Note
• https://osv.dev/vulnerability/CVE-2026-24738 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2026-4379 · Vendor Advisory
• https://github.com/gmrtd/gmrtd · Note
• https://github.com/gmrtd/gmrtd/releases/tag/v0.17.2 · Note
• https://suse.com/security/cve/CVE-2026-24117 · Note
• https://suse.com/security/cve/CVE-2023-43630 · Note
• https://suse.com/security/cve/CVE-2026-23954 · Note
• https://suse.com/security/cve/CVE-2026-24740 · Note
• https://suse.com/security/cve/CVE-2026-25499 · Note