43 matches found
CHIRP-CodeExecution_via_Malicious_ImageFile
CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver Product: CHIRP - An open-source project for programming Ham Radios. Affected Versions: URL: https://github.com/kk7ds/chirp, https://chirpmyradio.com Affected Versions: = chirp-next-20260814 CWE: CWE-95 Eval Injection Overview CHIRP's...
MGASA-2026-0473 Updated chirp packages fix a security vulnerability
CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver...
Updated chirp packages fix a security vulnerability
CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver...
openSUSE 16 Security Update : chirp (openSUSE-SU-2026:21866-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21866-1 advisory. Changes in chirp: - Update to version 20260911: ftm300d: Experimental Yaesu FTM-300DR driver Update Ukrainian localization ar8200: Fix importing memorie...
Security update for chirp (important)
openSUSE security update: security update for chirp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21866-1 Rating: important References: bsc1280123 Cross-References: CVE-2026-78136 Affected Products: openSUSE Leap 16.0...
OPENSUSE-SU-2026:21866-1 Security update for chirp
This update for chirp fixes the following issues: Changes in chirp: - Update to version 20260911: ftm300d: Experimental Yaesu FTM-300DR driver Update Ukrainian localization ar8200: Fix importing memories with AM mode Unify Baofeng setting descriptions across drivers Add Yaesu FT5D uvb5: Fix Rever...
chirp-20260911-1.1 on GA media (moderate)
chirp-20260911-1.1 on GA media Announcement ID: openSUSE-SU-2026:11770-1 Rating: moderate Cross-References: CVE-2026-78136 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the chirp-20260911-1....
OPENSUSE-SU-2026:11770-1 chirp-20260911-1.1 on GA media
These are all security issues fixed in the chirp-20260911-1.1 package on the GA media of openSUSE Tumbleweed...
[SECURITY] Fedora 45 Update: chirp-0.4.0^20260828-1.fc45
Chirp is a tool for programming two-way radio equipment It provides a generic user interface to the programming data and process that can drive many radio models under the hood...
Fedora 45 : chirp (2026-6627e39af0)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6627e39af0 advisory. New version fixing arbitrary code execution via crafted Kenwood CSV data. Tenable has extracted the preceding description block directly from the Fedora...
[SECURITY] Fedora 44 Update: chirp-0.4.0^20260828-1.fc44
Chirp is a tool for programming two-way radio equipment It provides a generic user interface to the programming data and process that can drive many radio models under the hood...
[SECURITY] Fedora 43 Update: chirp-0.4.0^20260828-1.fc43
Chirp is a tool for programming two-way radio equipment It provides a generic user interface to the programming data and process that can drive many radio models under the hood...
Fedora 44 : chirp (2026-20feeb23e0)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-20feeb23e0 advisory. New version fixing arbitrary code execution via crafted Kenwood CSV data. Tenable has extracted the preceding description block directly from the Fedora...
Fedora 43 : chirp (2026-23b8df7771)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-23b8df7771 advisory. New version fixing arbitrary code execution via crafted Kenwood CSV data. Tenable has extracted the preceding description block directly from the Fedora...
CHIRP chirp-next-20260814 Arbitrary Code Execution
CHIRP's Kenwood ITM file format driver passes raw CSV field values from an opened file directly to Python's built-in eval with no validation. An attacker who delivers a crafted file to a CHIRP user achieves arbitrary code execution as the victim user. CHIRP — Arbitrary Code Execution via eval in...
CVE-2026-78136
A flaw was found in CHIRP from chirpmyradio. A local attacker can achieve arbitrary code execution by tricking a user into processing a specially crafted Comma Separated Values CSV file. This vulnerability, an eval injection, occurs within the cleantmode function when handling CSV data, leading t...
CVE-2026-78136
chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in cleantmode in drivers/kenwooditm.py...
CVE-2026-78136
chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in cleantmode in drivers/kenwooditm.py...
