---
id: CVE-2026-56788
title: RTKLIB 2.4.3 - Out-of-bounds Read via Negative Array Index in getcodepri
summary: >-
  RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in
  getcodepri function when processing unrecognized RINEX observation codes,
  allowing attackers to trigger denial of service. Crafted RINEX files with
  unknown observation …
severity: medium
cvss: 4.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L'
cvssSource: cna
cwe:
  - CWE-125
vendor: tomojitakasu
product: RTKLIB
affected:
  - RTKLIB <= 2.4.3
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-06-27T02:19:43.997310Z'
exploitAvailable: true
published: '2026-06-25'
updated: '2026-11-08'
sourceUpdated: '2026-11-08T14:06:26.984Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-56788'
references:
  - url: 'https://github.com/tomojitakasu/RTKLIB/issues/797'
    label: Researcher Disclosure
  - url: >-
      https://www.vulncheck.com/advisories/rtklib-out-of-bounds-read-via-negative-array-index-in-getcodepri
tags:
  - cve.org
  - exploit-available
epss: 0.00173
epssPercentile: 0.06749
ingestedAt: '2026-11-08T14:51:22.330Z'
---

## Overview

RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when processing unrecognized RINEX observation codes, allowing attackers to trigger denial of service. Crafted RINEX files with unknown observation types cause negative array indexing into the codepris table, resulting in reliable crashes and potential memory disclosure of adjacent global data.

## Affected

- `RTKLIB <= 2.4.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.