{"id":"CVE-2026-102485","published":"2026-10-21T16:17:14.187","lastModified":"2026-10-22T16:18:19.040","description":"Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memory via a PPS Control (@@Gc) reply with an out-of-range mode byte.","cvssScore":5.2,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwes":["CWE-125"],"vendors":[],"products":[],"references":[{"url":"https://gitlab.com/NTPsec/ntpsec/-/commit/22a09b3aec58831a9e4a008f3f22caa155f969c2","tags":[]},{"url":"https://gitlab.com/NTPsec/ntpsec/-/work_items/895","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}