by Kastro
Paper/Archive/CVE-2026-122992

CVE-2026-122992

G4KLX DStarGateway — In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty R…

CVSS 9.2
critical.is priorityof 100
28
CVSS 9.2 (CNA)9.2 / 10 × 3027.6Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field.

Affected

ProductAffectedFixed inSource
DStarGatewaybd3b8650c41d3537c2af1d2d32dcb5b9f2a1a754 – < 7b75de605dca542a2953dd74c16f0eac96a8944e7b75de605dca542a2953dd74c16f0eac96a8944eCNA

Scores by source

mitre (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

References

refgithub.com/g4klx/DStarGatewayrefgithub.com/F4FXL/DStarGateway/pull/71refgithub.com/F4FXL/DStarGateway/blob/7b75de605dca542a2953dd74c16f0eac96a8944e/README.md?plain=1#L159-L161