Dashboard / CVE-2026-56789

CVE-2026-56789

HIGH
MEDIUM Priority: 0.03 BB Relevance: 64/100
Published: 2026-06-25 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Passive
S: X
AT: None
VC: None
VI: None
VA: High

Description

RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb function in src/rinex.c that allows attackers to trigger memory corruption by failing to clamp satellite count values from RINEX epoch headers. Attackers can craft malicious RINEX files declaring more than 64 satellites per epoch to cause heap buffer overflow writes and out-of-bounds stack reads, crashing RTKLIB-based applications including rnx2rtkp and RTKPOST.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
rtklib rtklib < 2.4.3

References & Advisories (2)

https://github.com/tomojitakasu/RTKLIB/issues/796
Exploit Issue Tracking Third Party Advisory

Bug Bounty Relevance

64 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity

CVSS Score

7.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.42%
Raw Score 0.004220
Percentile 36.5%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00422
2026-10-28
0.00422

Intelligence Sources

nvd ref →

External Links