PT-2026-52549 · Tomojitakasu · Rtklib

Fuzzinglabs · Published 2026-06-25 · Updated 2026-06-25 · CVE-2026-56786

NVD

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode type1033 function that fails to clamp length counters to destination buffer size, allowing up to 191-byte overflow into fixed 64-byte descriptor fields. An attacker controlling an NTRIP or serial RTCM3 correction stream can craft a valid CRC-bearing type-1033 message to corrupt adjacent rtcm t object members, potentially achieving arbitrary code execution or denial of service.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-56786

Affected Products

Rtklib

References · 3

• 🔥 https://github.com/tomojitakasu/RTKLIB/issues/799 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-56786 · Security Note
• https://vulncheck.com/advisories/rtklib-out-of-bounds-write-in-decode-type1033-via-crafted-rtcm3-message · Note