Buffer Overflow and Memory Corruption in Hamlib Application

CVE-2026-54634

What is CVE-2026-54634?

Hamlib is a ham radio control library that contains a vulnerability allowing unauthenticated remote clients to exploit the rigctld send_raw command. This flaw can cause an out-of-bounds write and oversized memory copy on TCP port 4532, which potentially leads to daemon crashes or the exposure of uninitialized memory data. The vulnerability is present in versions prior to 4.7.2, and it is crucial for users to update to this version or later to mitigate the risks associated with this flaw.

References