RTKLIB vulnerabilities

3 known vulnerabilities in RTKLIB from Tomojitakasu. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  RTKLIB: Out-of-bounds Read

  CVE-2026-56788Jun 25, 2026Tomojitakasu

  RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when processing unrecognized RINEX observation codes, allowing attackers to trigger denial of service. Crafted RINEX files with unknown observation types cause negative ar

• 7.5 High severity

  RTKLIB: Off-by-one Error

  CVE-2026-56787Jun 25, 2026Tomojitakasu

  RTKLIB through 2.4.3 contains an off-by-one out-of-bounds read vulnerability in the decode_ssr3 function at src/rtcm3.c:1446 that allows remote attackers to trigger a global buffer overflow via crafted RTCM3 SSR messages with attacker-controlled signal mode fi

• 9.8 Critical severity

  RTKLIB: Out-of-bounds Write

  CVE-2026-56786Jun 25, 2026Tomojitakasu

  RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 function that fails to clamp length counters to destination buffer size, allowing up to 191-byte overflow into fixed 64-byte descriptor fields. An attacker controlling an NTR