Unrated
svxlink — security advisory
[GHSA-5g48-xjmf-7p4q: StationData::setData stack overflow]
- Products
- svxlink
- Affected versions
- 14.08.1-1build1, 14.08.1-2, 15.11+20171207~git445-380e5333-1, 15.11-2.1, 17.12.1-1, 17.12.1-2, 17.12.2-4, 19.09.1-1, 19.09.1-2, 19.09.1-3, 19.09.2-1, 19.09.2-1.1build2, 19.09.2-1.1build3, 19.09.2-1build1, 24.02-5, 25.05.1-2, 25.05.1-4, 25.05.1-4ubuntu1, 25.05.1-4ubuntu2, 26.05.1-1
- Fixed versions
- Not specified
- CVEs
- CVE-2026-73154
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 03:15 UTC · Revision 1
Source evidence
[GHSA-5g48-xjmf-7p4q: StationData::setData stack overflow]
osv:UBUNTU-CVE-2026-73154
svxlink
Fixed versions: Not specified
svxlink
Fixed versions: Not specified
svxlink
Fixed versions: Not specified
svxlink
Fixed versions: Not specified
svxlink
Fixed versions: Not specified
svxlink
Fixed versions: Not specified
svxlink
Fixed versions: Not specified
Complete source record
{
"id": "c0f5b60e17b16349c9312140bbe4ce8bad94d2e5571d08455a6f2ba51f6f9918",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-73154",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2026-73154",
"summary": "[GHSA-5g48-xjmf-7p4q: StationData::setData stack overflow]",
"evidence": "osv:UBUNTU-CVE-2026-73154",
"products": [
{
"name": {
"value": "svxlink",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "14.08.1-1build1",
"evidence": "/affected/0/versions"
},
{
"value": "14.08.1-2",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "svxlink",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "15.11-2.1",
"evidence": "/affected/1/versions"
},
{
"value": "15.11+20171207~git445-380e5333-1",
"evidence": "/affected/1/versions"
},
{
"value": "17.12.1-1",
"evidence": "/affected/1/versions"
},
{
"value": "17.12.1-2",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "svxlink",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "17.12.2-4",
"evidence": "/affected/2/versions"
},
{
"value": "19.09.1-1",
"evidence": "/affected/2/versions"
},
{
"value": "19.09.1-2",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "svxlink",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "19.09.1-3",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "svxlink",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "19.09.2-1",
"evidence": "/affected/4/versions"
},
{
"value": "19.09.2-1build1",
"evidence": "/affected/4/versions"
},
{
"value": "19.09.2-1.1build2",
"evidence": "/affected/4/versions"
},
{
"value": "19.09.2-1.1build3",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "svxlink",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "25.05.1-4",
"evidence": "/affected/5/versions"
},
{
"value": "25.05.1-4ubuntu1",
"evidence": "/affected/5/versions"
},
{
"value": "25.05.1-4ubuntu2",
"evidence": "/affected/5/versions"
},
{
"value": "26.05.1-1",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "svxlink",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "24.02-5",
"evidence": "/affected/6/versions"
},
{
"value": "25.05.1-2",
"evidence": "/affected/6/versions"
},
{
"value": "25.05.1-4",
"evidence": "/affected/6/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "UBUNTU-CVE-2026-73154",
"aliases": [
"UBUNTU-CVE-2026-73154"
],
"metrics": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "svxlink",
"purl": "pkg:deb/ubuntu/svxlink?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"14.08.1-1build1",
"14.08.1-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-73154.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libasyncaudio1.3",
"binary_version": "14.08.1-2"
},
{
"binary_name": "libasynccore1.3",
"binary_version": "14.08.1-2"
},
{
"binary_name": "libasynccpp1.3",
"binary_version": "14.08.1-2"
},
{
"binary_name": "libasyncqt1.3",
"binary_version": "14.08.1-2"
},
{
"binary_name": "libecholib1.3",
"binary_version": "14.08.1-2"
},
{
"binary_name": "qtel",
"binary_version": "14.08.1-2"
},
{
"binary_name": "remotetrx",
"binary_version": "14.08.1-2"
},
{
"binary_name": "svxlink-server",
"binary_version": "14.08.1-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "svxlink",
"purl": "pkg:deb/ubuntu/svxlink?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"15.11-2.1",
"15.11+20171207~git445-380e5333-1",
"17.12.1-1",
"17.12.1-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-73154.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libasyncaudio1.5",
"binary_version": "17.12.1-2"
},
{
"binary_name": "libasynccore1.5",
"binary_version": "17.12.1-2"
},
{
"binary_name": "libasynccpp1.5",
"binary_version": "17.12.1-2"
},
{
"binary_name": "libasyncqt1.5",
"binary_version": "17.12.1-2"
},
{
"binary_name": "libecholib1.3",
"binary_version": "17.12.1-2"
},
{
"binary_name": "qtel",
"binary_version": "17.12.1-2"
},
{
"binary_name": "qtel-icons",
"binary_version": "17.12.1-2"
},
{
"binary_name": "remotetrx",
"binary_version": "17.12.1-2"
},
{
"binary_name": "svxlink-calibration-tools",
"binary_version": "17.12.1-2"
},
{
"binary_name": "svxlink-gpio",
"binary_version": "17.12.1-2"
},
{
"binary_name": "svxlink-server",
"binary_version": "17.12.1-2"
},
{
"binary_name": "svxreflector",
"binary_version": "17.12.1-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "svxlink",
"purl": "pkg:deb/ubuntu/svxlink?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"17.12.2-4",
"19.09.1-1",
"19.09.1-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-73154.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libasyncaudio1.6",
"binary_version": "19.09.1-2"
},
{
"binary_name": "libasynccore1.6",
"binary_version": "19.09.1-2"
},
{
"binary_name": "libasynccpp1.6",
"binary_version": "19.09.1-2"
},
{
"binary_name": "libasyncqt1.6",
"binary_version": "19.09.1-2"
},
{
"binary_name": "libecholib1.3",
"binary_version": "19.09.1-2"
},
{
"binary_name": "qtel",
"binary_version": "19.09.1-2"
},
{
"binary_name": "qtel-icons",
"binary_version": "19.09.1-2"
},
{
"binary_name": "remotetrx",
"binary_version": "19.09.1-2"
},
{
"binary_name": "svxlink-calibration-tools",
"binary_version": "19.09.1-2"
},
{
"binary_name": "svxlink-gpio",
"binary_version": "19.09.1-2"
},
{
"binary_name": "svxlink-server",
"binary_version": "19.09.1-2"
},
{
"binary_name": "svxreflector",
"binary_version": "19.09.1-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "svxlink",
"purl": "pkg:deb/ubuntu/svxlink?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"19.09.1-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-73154.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libasyncaudio1.6",
"binary_version": "19.09.1-3"
},
{
"binary_name": "libasynccore1.6",
"binary_version": "19.09.1-3"
},
{
"binary_name": "libasynccpp1.6",
"binary_version": "19.09.1-3"
},
{
"binary_name": "libasyncqt1.6",
"binary_version": "19.09.1-3"
},
{
"binary_name": "libecholib1.3",
"binary_version": "19.09.1-3"
},
{
"binary_name": "qtel",
"binary_version": "19.09.1-3"
},
{
"binary_name": "qtel-icons",
"binary_version": "19.09.1-3"
},
{
"binary_name": "remotetrx",
"binary_version": "19.09.1-3"
},
{
"binary_name": "svxlink-calibration-tools",
"binary_version": "19.09.1-3"
},
{
"binary_name": "svxlink-gpio",
"binary_version": "19.09.1-3"
},
{
"binary_name": "svxlink-server",
"binary_version": "19.09.1-3"
},
{
"binary_name": "svxreflector",
"binary_version": "19.09.1-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "svxlink",
"purl": "pkg:deb/ubuntu/svxlink?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"19.09.2-1",
"19.09.2-1build1",
"19.09.2-1.1build2",
"19.09.2-1.1build3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-73154.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libasyncaudio1.6t64",
"binary_version": "19.09.2-1.1build3"
},
{
"binary_name": "libasynccore1.6t64",
"binary_version": "19.09.2-1.1build3"
},
{
"binary_name": "libasynccpp1.6t64",
"binary_version": "19.09.2-1.1build3"
},
{
"binary_name": "libasyncqt1.6t64",
"binary_version": "19.09.2-1.1build3"
},
{
"binary_name": "libecholib1.3t64",
"binary_version": "19.09.2-1.1build3"
},
{
"binary_name": "qtel",
"binary_version": "19.09.2-1.1build3"
},
{
"binary_name": "qtel-icons",
"binary_version": "19.09.2-1.1build3"
},
{
"binary_name": "remotetrx",
"binary_version": "19.09.2-1.1build3"
},
{
"binary_name": "svxlink-calibration-tools",
"binary_version": "19.09.2-1.1build3"
},
{
"binary_name": "svxlink-gpio",
"binary_version": "19.09.2-1.1build3"
},
{
"binary_name": "svxlink-server",
"binary_version": "19.09.2-1.1build3"
},
{
"binary_name": "svxreflector",
"binary_version": "19.09.2-1.1build3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "svxlink",
"purl": "pkg:deb/ubuntu/svxlink?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"25.05.1-4",
"25.05.1-4ubuntu1",
"25.05.1-4ubuntu2",
"26.05.1-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-73154.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libasyncaudio1.9",
"binary_version": "26.05.1-1"
},
{
"binary_name": "libasynccore1.9",
"binary_version": "26.05.1-1"
},
{
"binary_name": "libasynccpp1.9",
"binary_version": "26.05.1-1"
},
{
"binary_name": "libasyncqt1.9",
"binary_version": "26.05.1-1"
},
{
"binary_name": "libecholib1.3t64",
"binary_version": "26.05.1-1"
},
{
"binary_name": "qtel",
"binary_version": "26.05.1-1"
},
{
"binary_name": "qtel-icons",
"binary_version": "26.05.1-1"
},
{
"binary_name": "remotetrx",
"binary_version": "26.05.1-1"
},
{
"binary_name": "svxlink-calibration-tools",
"binary_version": "26.05.1-1"
},
{
"binary_name": "svxlink-gpio",
"binary_version": "26.05.1-1"
},
{
"binary_name": "svxlink-server",
"binary_version": "26.05.1-1"
},
{
"binary_name": "svxreflector",
"binary_version": "26.05.1-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "svxlink",
"purl": "pkg:deb/ubuntu/svxlink?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"24.02-5",
"25.05.1-2",
"25.05.1-4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-73154.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libasyncaudio1.8",
"binary_version": "25.05.1-4"
},
{
"binary_name": "libasynccore1.8",
"binary_version": "25.05.1-4"
},
{
"binary_name": "libasynccpp1.8",
"binary_version": "25.05.1-4"
},
{
"binary_name": "libasyncqt1.8",
"binary_version": "25.05.1-4"
},
{
"binary_name": "libecholib1.3t64",
"binary_version": "25.05.1-4"
},
{
"binary_name": "qtel",
"binary_version": "25.05.1-4"
},
{
"binary_name": "qtel-icons",
"binary_version": "25.05.1-4"
},
{
"binary_name": "remotetrx",
"binary_version": "25.05.1-4"
},
{
"binary_name": "svxlink-calibration-tools",
"binary_version": "25.05.1-4"
},
{
"binary_name": "svxlink-gpio",
"binary_version": "25.05.1-4"
},
{
"binary_name": "svxlink-server",
"binary_version": "25.05.1-4"
},
{
"binary_name": "svxreflector",
"binary_version": "25.05.1-4"
}
]
}
}
],
"modified": "2026-10-17T13:01:00.895768996Z",
"provider": "osv",
"upstream": [
"CVE-2026-73154"
],
"references": [
"https://ubuntu.com/security/CVE-2026-73154",
"https://www.cve.org/CVERecord?id=CVE-2026-73154",
"https://github.com/sm0svx/svxlink/security/advisories/GHSA-5g48-xjmf-7p4q"
]
},
"related_cves": [
{
"value": "CVE-2026-73154",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 360883,
"published_at": "2026-08-13T00:00:00+00:00"
}