CVE-2026-73153

GHSA-624p-cp8x-6hp6: EchoLink RTCP/SDES: out-of-bounds read...

UBUNTU-CVE-2026-73152

GHSA-4g8q-rgxf-fmgf: EchoLink proxy: integer truncation in message length...

UBUNTU-CVE-2026-73153

GHSA-624p-cp8x-6hp6: EchoLink RTCP/SDES: out-of-bounds read...

CVE-2026-73152

GHSA-4g8q-rgxf-fmgf: EchoLink proxy: integer truncation in message length...

CVE-2026-73153

GHSA-624p-cp8x-6hp6: EchoLink RTCP/SDES: out-of-bounds read...

CVE-2026-73152

A flaw was found in svxlink's EchoLink proxy implementation. An integer truncation in message-length handling can result in incorrect buffer sizes, leading to potential memory corruption when processing specially crafted proxy messages. Mitigation Update svxlink to version 26.05.1 or later...

CVE-2026-73152

GHSA-4g8q-rgxf-fmgf: EchoLink proxy: integer truncation in message length...

CVE-2026-73150

A flaw was found in svxlink's LocationInfo/APRS functionality. The updateQsoStatus function in AprsTcpClient.cpp formats a remote EchoLink station's callsign and info string into a fixed 80-byte stack buffer using sprintf without length checks. A remote attacker controlling an EchoLink station ca...

PT-2026-80188

GHSA-4g8q-rgxf-fmgf: EchoLink proxy: integer truncation in message length...

PT-2026-80189

GHSA-624p-cp8x-6hp6: EchoLink RTCP/SDES: out-of-bounds read...

echolink-us.com Cross Site Scripting vulnerability OBB-2340584

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...