CRITICAL 9.2 NVD
CVE-2026-122992
In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field.
In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field.
References
- https://github.com/F4FXL/DStarGateway/blob/7b75de605dca542a2953dd74c16f0eac96a8944e/README
- https://github.com/F4FXL/DStarGateway/pull/71
- https://github.com/g4klx/DStarGateway
This critical severity vulnerability with a CVSS score of 9.2 was published on 2026-11-05 via NVD.
Risk Timeline
CVE Disclosed2026-11-05 · -1 days ago
Remediation Resources
vulnfeed aggregates 16624 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.