CyberSecBulletin

Gpsd Project vulnerabilities

We track 2 vulnerabilities in Gpsd Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 2, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Gpsd Project vulnerabilities

  • 7.5 High severity

    Red Hat Enterprise Linux 10: Integer Underflow (Wrap or Wraparound)

    CVE-2025-67269Red Hat

    An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67199da7`. When parsing a NAVCOM packet, the payload length is calculated using `lexer->length = (size_

  • 7.5 High severity

    Red Hat Enterprise Linux 10: Heap-based Buffer Overflow

    CVE-2025-67268Red Hat

    gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN 129540 (GNSS Satellites in View) packets, fails to validate the user-supplied satellit