VULNERABILITY INTELLIGENCE

CVE-2026-42996

EPSS probability0.57%
CISA KEVNot currently listed
Published2026-05-01
Last modified2026-10-26

Description

JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of @APRSIS GRID followed by a long Maidenhead locator. This occurs in grid2deg in APRSISClient.cpp.

Weakness classification

  • cve@mitre.org: CWE-121

Primary references