JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of @APRSIS GRID followed by a long Maidenhead locator. This occurs in grid2deg in APRSISClient.cpp.
PUBLISHED5.2CWE-121
Problem type
Affected products
JS8Call
JS8Call
<= 2.3.1 - AFFECTED
JS8Call-improved
JS8Call-improved
< 3.0 - AFFECTED
References
github.com
https://github.com/JS8Call-improved/JS8Call-improved/security/advisories/GHSA-98hp-pjp7-w62x
amateur-radio-resources.sourceforge.io
https://amateur-radio-resources.sourceforge.io/PDF/JS8APRS.pdf
github.com
https://github.com/js8call/js8call/blob/fd721e8b67eed84cb3c09d018205ab9a53e1a8b1/APRSISClient.cpp#L89-L102
JSON source
https://cveawg.mitre.org/api/cve/CVE-2026-42996Click to expand
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-42996",
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"dateUpdated": "2026-05-01T06:55:48.483Z",
"dateReserved": "2026-05-01T06:42:18.918Z",
"datePublished": "2026-05-01T06:42:58.858Z",
"state": "PUBLISHED"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre",
"dateUpdated": "2026-05-01T06:55:48.483Z"
},
"descriptions": [
{
"lang": "en",
"value": "JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of @APRSIS GRID followed by a long Maidenhead locator. This occurs in grid2deg in APRSISClient.cpp."
}
],
"affected": [
{
"vendor": "JS8Call",
"product": "JS8Call",
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThanOrEqual": "2.3.1"
}
]
},
{
"vendor": "JS8Call-improved",
"product": "JS8Call-improved",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "3.0"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE-121 Stack-based Buffer Overflow",
"cweId": "CWE-121",
"type": "CWE"
}
]
}
],
"references": [
{
"url": "https://github.com/JS8Call-improved/JS8Call-improved/security/advisories/GHSA-98hp-pjp7-w62x"
},
{
"url": "https://amateur-radio-resources.sourceforge.io/PDF/JS8APRS.pdf"
},
{
"url": "https://github.com/js8call/js8call/blob/fd721e8b67eed84cb3c09d018205ab9a53e1a8b1/APRSISClient.cpp#L89-L102"
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
]
}
}
}