Heap Buffer Overflow in RTKLIB Product from Tomoji Takasu

CVE-2026-56789

What is CVE-2026-56789?

RTKLIB versions up to 2.4.3 are susceptible to a heap buffer overflow vulnerability within the readrnxobsb function found in src/rinex.c. This security flaw arises when the software does not properly clamp satellite count values specified in RINEX epoch headers. By crafting malicious RINEX files that assert more than 64 satellites per epoch, an attacker can exploit this oversight to execute heap buffer overflow writes and induce out-of-bounds stack reads. This vulnerability may lead to crashes in RTKLIB applications, including rnx2rtkp and RTKPOST, thereby compromising the functionality and reliability of geographic positioning systems.

References