PatchTheCVECVE-2026-56787: RTKLIB through 2.4.3 contains an off-by-one out-of-bounds read vulnerability in the decode_ssr3 function at sr
CVE-2026-56787 is a medium-severity flaw (CVSS 6.5) affecting rtklib. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
RTKLIB through 2.4.3 contains an off-by-one out-of-bounds read vulnerability in the decode_ssr3 function at src/rtcm3.c:1446 that allows remote attackers to trigger a global buffer overflow via crafted RTCM3 SSR messages with attacker-controlled signal mode fields. Remote attackers can exploit this vulnerability by sending malicious SSR correction streams over NTRIP or serial connections to cause denial of service or crash RTKLIB rovers and CORS
Why this priority
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.6% (top 53%) |
| CISA exploited list | No |
| Weakness | CWE-193 |
| Published | 2026-06-25 |
| Last modified | 2026-10-25 |
Last updated 2026-10-25 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-56787?
rtklib: upgrade to newer than 2.4.3. Exact commands for each OS are on this page.
Is CVE-2026-56787 being exploited?
CVE-2026-56787 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-56787 affect?
CVE-2026-56787 affects rtklib. Severity is medium (CVSS 6.5). RTKLIB through 2.4.3 contains an off-by-one out-of-bounds read vulnerability in the decode_ssr3 function at src/rtcm3.c:1446 that allows remote attackers to trigger a global buffer overflow via crafted RTCM3 SSR messages with attacker-contr
How urgent is CVE-2026-56787?
Priority 44/100. Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2026-56786 CRITICAL 9.8 UPGRADE RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 function that fails to c
- CVE-2026-56789 MEDIUM 6.5 UPGRADE RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb function in src/rinex.c
- CVE-2026-56788 MEDIUM 4.4 UPGRADE RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when processing unrec