CHIRP-CodeExecution_via_Malicious_ImageFile

CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver Product: CHIRP - An open-source project for programming Ham Radios. Affected Versions: URL: https://github.com/kk7ds/chirp, https://chirpmyradio.com Affected Versions: = chirp-next-20260814 CWE: CWE-95 Eval Injection Overview CHIRP's...

openSUSE 16 Security Update : chirp (openSUSE-SU-2026:21866-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21866-1 advisory. Changes in chirp: - Update to version 20260911: ftm300d: Experimental Yaesu FTM-300DR driver Update Ukrainian localization ar8200: Fix importing memorie...

Security update for chirp (important)

openSUSE security update: security update for chirp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21866-1 Rating: important References: bsc1280123 Cross-References: CVE-2026-78136 Affected Products: openSUSE Leap 16.0...

OPENSUSE-SU-2026:21866-1 Security update for chirp

This update for chirp fixes the following issues: Changes in chirp: - Update to version 20260911: ftm300d: Experimental Yaesu FTM-300DR driver Update Ukrainian localization ar8200: Fix importing memories with AM mode Unify Baofeng setting descriptions across drivers Add Yaesu FT5D uvb5: Fix Rever...

chirp-20260911-1.1 on GA media (moderate)

chirp-20260911-1.1 on GA media Announcement ID: openSUSE-SU-2026:11770-1 Rating: moderate Cross-References: CVE-2026-78136 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the chirp-20260911-1....

OPENSUSE-SU-2026:11770-1 chirp-20260911-1.1 on GA media

These are all security issues fixed in the chirp-20260911-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 45 Update: chirp-0.4.0^20260828-1.fc45

Chirp is a tool for programming two-way radio equipment It provides a generic user interface to the programming data and process that can drive many radio models under the hood...

Fedora 45 : chirp (2026-6627e39af0)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6627e39af0 advisory. New version fixing arbitrary code execution via crafted Kenwood CSV data. Tenable has extracted the preceding description block directly from the Fedora...

[SECURITY] Fedora 44 Update: chirp-0.4.0^20260828-1.fc44

Chirp is a tool for programming two-way radio equipment It provides a generic user interface to the programming data and process that can drive many radio models under the hood...

[SECURITY] Fedora 43 Update: chirp-0.4.0^20260828-1.fc43

Chirp is a tool for programming two-way radio equipment It provides a generic user interface to the programming data and process that can drive many radio models under the hood...

Fedora 43 : chirp (2026-23b8df7771)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-23b8df7771 advisory. New version fixing arbitrary code execution via crafted Kenwood CSV data. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 44 : chirp (2026-20feeb23e0)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-20feeb23e0 advisory. New version fixing arbitrary code execution via crafted Kenwood CSV data. Tenable has extracted the preceding description block directly from the Fedora...

CVE-2026-78136

A flaw was found in CHIRP from chirpmyradio. A local attacker can achieve arbitrary code execution by tricking a user into processing a specially crafted Comma Separated Values CSV file. This vulnerability, an eval injection, occurs within the cleantmode function when handling CSV data, leading t...

CVE-2026-78136

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in cleantmode in drivers/kenwooditm.py...

CVE-2026-78136

chirpmyradio CHIRP (a radio programming tool) is vulnerable to eval injection via crafted CSV data in the _clean_tmode function within drivers/kenwood_itm.py. This flaw allows arbitrary code execution when a user opens a maliciously crafted CSV file, as indicated by the associated research reposi...

CVE-2026-78136

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in cleantmode in drivers/kenwooditm.py...

CVE-2026-78136

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in cleantmode in drivers/kenwooditm.py...

CVE-2026-78136

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in cleantmode in drivers/kenwooditm.py...

EUVD-2026-64616

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in cleantmode in drivers/kenwooditm.py...

PT-2026-79749

Name of the Vulnerable Software and Affected Versions chirpmyradio CHIRP versions prior to 39178db Description An eval injection issue exists when processing crafted CSV data. This occurs within the clean tmode function located in the drivers/kenwood itm.py file. Eval injection is a flaw where an...