CVE-2026-56789 RTKLIB 2.4.3 - Heap Buffer Overflow and Stack Read via Oversized RINEX Epoch Satellite Count
Attackers can execute arbitrary code or crash applications by providing malicious RINEX files with excessive satellite counts to RTKLIB.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-56789?
CVE-2026-56789 is a high-severity memory corruption vulnerability in tomojitakasu RTKLIB, published on 25 Jun 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb function in src/rinex.c that allows attackers to trigger memory corruption by failing to clamp satellite count values from RINEX epoch headers. Attackers can craft malicious RINEX files declaring more than 64 satellites per epoch to cause heap buffer overflow writes and out-of-bounds stack reads, crashing RTKLIB-based applications including rnx2rtkp and RTKPOST.
Weakness: CWE-122
Which versions are affected by CVE-2026-56789?
It affects 1 product.
Products include Rtklib Rtklib.
How do I fix CVE-2026-56789?
No fix has been published for CVE-2026-56789 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-56789 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-56789 exists.
Other vulnerabilities in tomojitakasu RTKLIB
Sources
Also known as DEBIAN-CVE-2026-56789, GHSA-3fqf-8h5x-pq8x, UBUNTU-CVE-2026-56789.