{"affected":[{"defaultStatus":"unaffected","product":"DStarGateway","source":"CNA: mitre","vendor":"G4KLX","versions":[{"lessThan":"7b75de605dca542a2953dd74c16f0eac96a8944e","status":"affected","version":"bd3b8650c41d3537c2af1d2d32dcb5b9f2a1a754","versionType":"git"}]}],"cveId":"CVE-2026-122992","cwes":["CWE-191"],"description":"In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":9.2,"severity":"critical","source":"CNA: mitre","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","version":"4.0"}],"modifiedAt":1793846195657,"publishedAt":1793846195657,"references":[{"source":"CNA: mitre","tags":[],"url":"https://github.com/g4klx/DStarGateway"},{"source":"CNA: mitre","tags":[],"url":"https://github.com/F4FXL/DStarGateway/pull/71"},{"source":"CNA: mitre","tags":[],"url":"https://github.com/F4FXL/DStarGateway/blob/7b75de605dca542a2953dd74c16f0eac96a8944e/README.md?plain=1#L159-L161"}],"remediation":[],"revision":"1140897086add60a73e6ccb0096a607f766b1e425e049b7d8fa4a1c27b5a3d1c","sources":[{"modifiedAt":1793846195657,"name":"CNA: mitre","retrievedAt":1793848178320,"url":"https://www.cve.org/CVERecord?id=CVE-2026-122992"}],"ssvc":null,"status":"published","title":"CVE-2026-122992","updatedAt":1793848178320}