Gpsd vulnerabilities

2 known vulnerabilities in Gpsd from Gpsd Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Red Hat Enterprise Linux 10: Integer Underflow (Wrap or Wraparound)

  CVE-2025-67269Jan 2, 2026Red Hat

  An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67199da7`. When parsing a NAVCOM packet, the payload length is calculated using `lexer->length = (size_

• 7.5 High severity

  Red Hat Enterprise Linux 10: Heap-based Buffer Overflow

  CVE-2025-67268Jan 2, 2026Red Hat

  gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN 129540 (GNSS Satellites in View) packets, fails to validate the user-supplied satellit