PT-2026-52552 · Tomojitakasu · Rtklib

Fuzzinglabs · Published 2026-06-25 · Updated 2026-06-25 · CVE-2026-56789

Mitre

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb function in src/rinex.c that allows attackers to trigger memory corruption by failing to clamp satellite count values from RINEX epoch headers. Attackers can craft malicious RINEX files declaring more than 64 satellites per epoch to cause heap buffer overflow writes and out-of-bounds stack reads, crashing RTKLIB-based applications including rnx2rtkp and RTKPOST.

Exploit

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-56789

Affected Products

Rtklib

References · 3

• 🔥 https://github.com/tomojitakasu/RTKLIB/issues/796 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-56789 · Security Note
• https://vulncheck.com/advisories/rtklib-heap-buffer-overflow-and-stack-read-via-oversized-rinex-epoch-satellite-count · Note