CVE-2026-102485CWE-125

CVE-2026-102485

Medium · published October 21, 2026

CVSS v3.1
5.2
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memory via a PPS Control (@@Gc) reply with an out-of-range mode byte.

The record
Technical detail
CVSS v3.1
5.2 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00238 · 14.0th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-10-21T20:17Z
References (2)
https://gitlab.com/NTPsec/ntpsec/-/commit/22a09b3aec58831a9e4a008f3f22caa155f969c2 · [email protected]https://gitlab.com/NTPsec/ntpsec/-/work_items/895 · [email protected]
EPSS history
Timeline
  • 23 OCT 03:54Z
    EPSS moved — → 0%
    epss
  • 21 OCT 15:03Z
    Out-of-bounds Read in ntpsec
    cvelistv5
  • 21 OCT 15:03Z
    Out-of-bounds Read in ntpsec
    cvelistv5