A vulnerability has been found in JS8Call-improved up to 2.3.1 and classified as critical. The affected element is the function
grid2deg of the file APRSISClient.cpp. Performing a manipulation results in stack-based buffer overflow.
This vulnerability is identified as CVE-2026-42996. The attack can be initiated remotely. There is not any exploit available.
The affected component should be upgraded.