CVE-2026-56788CWE-125

RTKLIB 2.4.3 - Out-of-bounds Read via Negative Array Index in getcodepri

Medium · published June 25, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
6.4
In the wild
Unconfirmed
What it is

RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when processing unrecognized RINEX observation codes, allowing attackers to trigger denial of service. Crafted RINEX files with unknown observation types cause negative array indexing into the codepris table, resulting in reliable crashes and potential memory disclosure of adjacent global data.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00173 · 6.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-06-25T18:13Z
EPSS history
Timeline
  • 25 JUN 18:13Z
    RTKLIB 2.4.3 - Out-of-bounds Read via Negative Array Index in getcodepri
    cvelistv5