RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when processing unrecognized RINEX observation codes, allowing attackers to trigger denial of service. Crafted RINEX files with unknown observation types cause negative array indexing into the codepris table, resulting in reliable crashes and potential memory disclosure of adjacent global data.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Tomojitakasu |
|
No data.
No data.
References
History
Fri, 26 Jun 2026 10:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Tomojitakasu
Tomojitakasu rtklib |
|
| Vendors & Products |
Tomojitakasu
Tomojitakasu rtklib |
Thu, 25 Jun 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when processing unrecognized RINEX observation codes, allowing attackers to trigger denial of service. Crafted RINEX files with unknown observation types cause negative array indexing into the codepris table, resulting in reliable crashes and potential memory disclosure of adjacent global data. | |
| Title | RTKLIB 2.4.3 - Out-of-bounds Read via Negative Array Index in getcodepri | |
| Weaknesses | CWE-125 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: VulnCheck
Published: 2026-06-25T18:13:15.671Z
Updated: 2026-06-25T18:13:15.671Z
Reserved: 2026-06-23T01:24:27.651Z
Link: CVE-2026-56788
Vulnrichment
No data.
NVD
No data.
Redhat
No data.