Gpsd

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-67269 HIGH POC PATCH This Week

An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67199da7`. [CVSS 7.5 HIGH]

Denial Of Service Integer Overflow Red Hat Gpsd Suse

NVD GitHub

CVSS 3.1

7.5

EPSS

0.1%

CVE-2025-67268 CRITICAL POC PATCH Act Now

gpsd (before commit dc966aa) has a heap buffer overflow in the NMEA2000 satellite view handler (PGN 129540). A malicious satellite count value overwrites the skyview array, enabling code execution on GPS daemon processes. PoC available, patch available.

RCE Denial Of Service Memory Corruption Heap Overflow Red Hat +2

NVD GitHub

CVSS 3.1

9.8

EPSS

0.1%

CVE-2025-67269

EPSS 0% CVSS 7.5

HIGH POC PATCH This Week

An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67199da7`. [CVSS 7.5 HIGH]

Denial Of Service Integer Overflow Red Hat +2

NVD GitHub

CVE-2025-67268

EPSS 0% CVSS 9.8

CRITICAL POC PATCH Act Now

RCE Denial Of Service Memory Corruption +4

NVD GitHub