Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-42996

JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of @APRSIS GRID followed by a long Maidenhead locator. This occurs in grid2deg in APRSISClient.cpp.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:224b13962db781611f7e3a3e818aabccec8ff12da14a23b95688281fabf0dcd0
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"JS8Call-improved","vendor":"JS8Call-improved","versions":[{"lessThan":"3.0","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f368a6df71ae4f8855d9bab7b0caf0f7012f062cb2c6426ac52bc4f311f9df69 · sha256:9a007024344fd520… · /containers/cna/affected/1

{"defaultStatus":"unknown","product":"JS8Call","vendor":"JS8Call","versions":[{"lessThanOrEqual":"2.3.1","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f368a6df71ae4f8855d9bab7b0caf0f7012f062cb2c6426ac52bc4f311f9df69 · sha256:9a007024344fd520… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"JS8Call-improved","vendor":"JS8Call-improved","versions":[{"lessThan":"3.0","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f368a6df71ae4f8855d9bab7b0caf0f7012f062cb2c6426ac52bc4f311f9df69 · sha256:9a007024344fd520… · /containers/cna/affected/1
{"defaultStatus":"unknown","product":"JS8Call","vendor":"JS8Call","versions":[{"lessThanOrEqual":"2.3.1","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f368a6df71ae4f8855d9bab7b0caf0f7012f062cb2c6426ac52bc4f311f9df69 · sha256:9a007024344fd520… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"Automatable":"YES","Recovery":"USER","Safety":"PRESENT","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":10,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","providerUrgency":"GREEN","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:Y/R:U/V:D/RE:M/U:Green","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":…
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:f368a6df71ae4f8855d9bab7b0caf0f7012f062cb2c6426ac52bc4f311f9df69 · sha256:9a007024344fd520… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion
{"cweId":"CWE-121","description":"CWE-121 Stack-based Buffer Overflow","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:f368a6df71ae4f8855d9bab7b0caf0f7012f062cb2c6426ac52bc4f311f9df69 · sha256:9a007024344fd520… · /containers/cna/problemTypes/0/descriptions/0

Source references

5 source assertions
{"url":"https://amateur-radio-resources.sourceforge.io/PDF/JS8APRS.pdf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f368a6df71ae4f8855d9bab7b0caf0f7012f062cb2c6426ac52bc4f311f9df69 · sha256:9a007024344fd520… · /containers/cna/references/1
{"url":"https://github.com/JS8Call-improved/JS8Call-improved/commit/a6c7a19b82bbd7c2c0c892576f84d7449e8c7088"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f368a6df71ae4f8855d9bab7b0caf0f7012f062cb2c6426ac52bc4f311f9df69 · sha256:9a007024344fd520… · /containers/cna/references/3
{"url":"https://github.com/JS8Call-improved/JS8Call-improved/security/advisories/GHSA-98hp-pjp7-w62x"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f368a6df71ae4f8855d9bab7b0caf0f7012f062cb2c6426ac52bc4f311f9df69 · sha256:9a007024344fd520… · /containers/cna/references/0
{"tags":["exploit"],"url":"https://github.com/JS8Call-improved/JS8Call-improved/security/advisories/GHSA-98hp-pjp7-w62x"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f368a6df71ae4f8855d9bab7b0caf0f7012f062cb2c6426ac52bc4f311f9df69 · sha256:9a007024344fd520… · /containers/adp/0/references/0
{"url":"https://github.com/js8call/js8call/blob/fd721e8b67eed84cb3c09d018205ab9a53e1a8b1/APRSISClient.cpp#L89-L102"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f368a6df71ae4f8855d9bab7b0caf0f7012f062cb2c6426ac52bc4f311f9df69 · sha256:9a007024344fd520… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer