Out-of-Bounds Read in Motorola Oncore Refclock Driver for NTPsec

CVE-2026-102485

What is CVE-2026-102485?

An out-of-bounds read vulnerability exists in the Motorola Oncore refclock driver of NTPsec ntpd prior to version 1.2.6. This flaw enables an attacker who has control over the serial data from the GPS receiver to potentially crash the ntpd service or disclose sensitive memory content through a PPS Control response that includes an out-of-range mode byte.

References