Gpsd_project Gpsd
6 CVEs affecting Gpsd_project Gpsd. Latest disclosed: 2026-07-09. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-67268 | Critical | 9.8 | 2026-01-02 | gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handle… |
CVE-2018-17937 | High | 8.8 | 2019-03-13 | gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to… |
CVE-2026-58459 | High | 7.8 | 2026-07-09 | gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device su… |
CVE-2025-67269 | High | 7.5 | 2026-01-02 | An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67… |
CVE-2023-43628 | Medium | 5.9 | 2023-12-05 | An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory c… |
CVE-2013-2038 | | 2014-02-06 | The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service (daemon termination) and possibly execute arbitrary code via a GPS… |