CyberSecBulletin

GPSd vulnerabilities

We track 2 vulnerabilities in GPSd products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 23, 2026.

2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score

Latest GPSd vulnerabilities

  • 7.8 High severity

    gpsd: Improper Control of Generation of Code

    CVE-2026-60122GPSd

    gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an attacker who controls GPS input data to execute arbitrary OS commands by injecting malicious content into the SKY.satellites[].u

  • 7.5 High severity

    GPSd: Integer Underflow (Wrap or Wraparound)

    CVE-2023-43628GPSdEPSS 1.23%

    An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability.