A vulnerability has been found in JS8Call-improved up to 2.3.1 and classified as critical. The affected element is the function grid2deg of the file APRSISClient.cpp. Performing a manipulation results in stack-based buffer overflow.

This vulnerability is identified as CVE-2026-42996. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.