EUVD-2026-28786
GHSA-9p5f-57xg-vg2m
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
4DescriptionNVD
An issue was discovered in kosma minmea 0.3.0. The minmea_scan functions format specifier copies NMEA field data to a caller-provided buffer without a size parameter. Applications using minmea_scan on untrusted input are vulnerable to a stack buffer overflow.
AnalysisAI
Stack buffer overflow in kosma minmea 0.3.0 allows remote unauthenticated attackers to cause denial of service through crafted NMEA field data. The minmea_scan function's format specifier copies data to caller-provided buffers without size validation, enabling memory corruption when processing untrusted NMEA GPS sentences. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: inventory all systems and applications using kosma minmea 0.3.0 or earlier versions; isolate affected systems from untrusted NMEA data sources where possible. Within 7 days: evaluate upgrade options to minmea 0.4.0 or later if available; if unavailable, implement network-level input validation to reject malformed NMEA sentences. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today