Skip to content
CVE PROGRAM SOURCE RECORD5.2 Medium

CVE-2026-102485

Out-of-bounds Read in ntpsec

Description

Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memory via a PPS Control (@@Gc) reply with an out-of-range mode byte.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NTPsec ntpsec

Default version status: unknown

  • 0 to < 1.2.6affected

References