CVE-2026-122992Critical· 9.2▾ MidnightIn G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 50.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field.
DStarGateway >= bd3b8650c41d3537c2af1d2d32dcb5b9f2a1a754 < 7b75de605dca542a2953dd74c16f0eac96a8944eRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-66217High· 7.5AIS-catcher is a multi-platform AIS receiver
CVE-2019-12678High· 7.5A vulnerability in the Session Initiation Protocol (SIP) inspection module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a d…
CVE-2025-67269High· 7.5An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67199da7`
CVE-2026-80303NoneAvast WFP stream parser integer underflow causes system crash
CVE-2026-116568High· 7.5FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsing
CVE-2026-116788High· 8.2FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding