Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Priority MEDIUM 64

RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb function in src/rinex.c that allows attackers to trigger memory corruption by failing to clamp satellite count values from RINEX epoch…

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00422 Published 2026-06-25 No fix listed CWE-122
Priority MEDIUM 55

RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when processing unrecognized RINEX observation codes, allowing attackers to trigger denial of service.

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.00173 Published 2026-06-25 No fix listed CWE-125
Priority HIGH 70

RTKLIB through 2.4.3 contains an off-by-one out-of-bounds read vulnerability in the decode_ssr3 function at src/rtcm3.c:1446 that allows remote attackers to trigger a global buffer overflow via crafted RTCM3 SSR messages…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00564 Published 2026-06-25 No fix listed CWE-193
Priority HIGH 81

RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 function that fails to clamp length counters to destination buffer size, allowing up to 191-byte overflow into fixed 64-byte descripto…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00711 Published 2026-06-25 No fix listed CWE-787