Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-78136

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.

Description

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

chirpmyradio CHIRP

Default version status: unaffected

  • 0 to < 39178dbfc4fece083ab9ed20286d6ae3a91a718eaffected

References