https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 04:20:50 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:0770 <p><strong>Affected:</strong> AlmaLinux:10: gpsd, AlmaLinux:10: gpsd-clients, AlmaLinux:10: python3-gpsd</p> <p>gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications (such as navigational and war-driving software) can share access to a GPS without contention or loss of data. Also, gpsd responds to queries with a format that is substantially easier to parse than NMEA 0183.</p> <p>Security Fix(es):</p> <p>* gpsd: gpsd: Denial of Service due to malformed NAVCOM packet parsing (CVE-2025-67269) * gpsd: gpsd: Arbitrary code execution via heap-based out-of-bounds write in NMEA2000 packet handling (CVE-2025-67268)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: gpsd, AlmaLinux:10: gpsd-clients, AlmaLinux:10: python3-gpsd</p> <p>gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications (such as navigational and war-driving software) can share access to a GPS without contention or loss of data. Also, gpsd responds to queries with a format that is substantially easier to parse than NMEA 0183.</p> <p>Security Fix(es):</p> <p>* gpsd: gpsd: Denial of Service due to malformed NAVCOM packet parsing (CVE-2025-67269) * gpsd: gpsd: Arbitrary code execution via heap-based out-of-bounds write in NMEA2000 packet handling (CVE-2025-67268)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:0770 https://cve.radiocsirt.org/vuln/bdu:2026-06690 bdu:2026-06690 https://cve.radiocsirt.org/vuln/bdu:2026-06690 https://cve.radiocsirt.org/vuln/euvd-2026-337726 EUVD-2026-337726 https://cve.radiocsirt.org/vuln/euvd-2026-337726 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67268 <p>gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN 129540 (GNSS Satellites in View) packets, fails to validate the user-supplied satellite count against the size of the skyview array (184 elements). This allows an attacker to write beyond the bounds of the array by providing a satellite count up to 255, leading to memory corruption, Denial of Service (DoS), and potentially arbitrary code execution.</p> <p>gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN 129540 (GNSS Satellites in View) packets, fails to validate the user-supplied satellite count against the size of the skyview array (184 elements). This allows an attacker to write beyond the bounds of the array by providing a satellite count up to 255, leading to memory corruption, Denial of Service (DoS), and potentially arbitrary code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-67268 https://cve.radiocsirt.org/vuln/ghsa-mp8p-xhgf-rpjv <p>gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN 129540 (GNSS Satellites in View) packets, fails to validate the user-supplied satellite count against the size of the skyview array (184 elements). This allows an attacker to write beyond the bounds of the array by providing a satellite count up to 255, leading to memory corruption, Denial of Service (DoS), and potentially arbitrary code execution.</p> <p>gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN 129540 (GNSS Satellites in View) packets, fails to validate the user-supplied satellite count against the size of the skyview array (184 elements). This allows an attacker to write beyond the bounds of the array by providing a satellite count up to 255, leading to memory corruption, Denial of Service (DoS), and potentially arbitrary code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-mp8p-xhgf-rpjv https://cve.radiocsirt.org/vuln/oesa-2026-3033 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: gpsd</p> <p>gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications (such as navigational and war-driving software) can share access to a GPS without contention or loss of data. Also, gpsd responds to queries with a format that is substantially easier to parse than NMEA 0183. Security Fix(es):</p> <p>gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN 129540 (GNSS Satellites in View) packets, fails to validate the user-supplied satellite count against the size of the skyview array (184 elements). This allows an attacker to write beyond the bounds of the array by providing a satellite count up to 255, leading to memory corruption, Denial of Service (DoS), and potentially arbitrary code execution.(CVE-2025-67268)</p> <p>An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67199da7`. When parsing a NAVCOM packet, the payload length is calculated using `lexer-&amp;gt;length = (size_t)c - 4` without checking if the input byte `c` is less than 4. This results in an unsigned integer underflow, setting `lexer-&amp;gt;length` to a very large value (near `SIZE…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: gpsd</p> <p>gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications (such as navigational and war-driving software) can share access to a GPS without contention or loss of data. Also, gpsd responds to queries with a format that is substantially easier to parse than NMEA 0183. Security Fix(es):</p> <p>gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN 129540 (GNSS Satellites in View) packets, fails to validate the user-supplied satellite count against the size of the skyview array (184 elements). This allows an attacker to write beyond the bounds of the array by providing a satellite count up to 255, leading to memory corruption, Denial of Service (DoS), and potentially arbitrary code execution.(CVE-2025-67268)</p> <p>An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67199da7`. When parsing a NAVCOM packet, the payload length is calculated using `lexer-&amp;gt;length = (size_t)c - 4` without checking if the input byte `c` is less than 4. This results in an unsigned integer underflow, setting `lexer-&amp;gt;length` to a very large value (near `SIZE…</p> https://cve.radiocsirt.org/vuln/oesa-2026-3033 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10008-1 <p>gpsd-3.27.3-1.1 on GA media</p> <p>gpsd-3.27.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10008-1 https://cve.radiocsirt.org/vuln/rhsa-2026:1621 <p>gpsd: gpsd: Arbitrary code execution via heap-based out-of-bounds write in NMEA2000 packet handling</p> <p>gpsd: gpsd: Arbitrary code execution via heap-based out-of-bounds write in NMEA2000 packet handling</p> https://cve.radiocsirt.org/vuln/rhsa-2026:1621 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-67268 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gpsd, Ubuntu:18.04:LTS: gpsd, Ubuntu:20.04:LTS: gpsd, Ubuntu:22.04:LTS: gpsd, Ubuntu:24.04:LTS: gpsd, Ubuntu:25.10: gpsd, Ubuntu:26.04:LTS: gpsd</p> <p>gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN 129540 (GNSS Satellites in View) packets, fails to validate the user-supplied satellite count against the size of the skyview array (184 elements). This allows an attacker to write beyond the bounds of the array by providing a satellite count up to 255, leading to memory corruption, Denial of Service (DoS), and potentially arbitrary code execution.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gpsd, Ubuntu:18.04:LTS: gpsd, Ubuntu:20.04:LTS: gpsd, Ubuntu:22.04:LTS: gpsd, Ubuntu:24.04:LTS: gpsd, Ubuntu:25.10: gpsd, Ubuntu:26.04:LTS: gpsd</p> <p>gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN 129540 (GNSS Satellites in View) packets, fails to validate the user-supplied satellite count against the size of the skyview array (184 elements). This allows an attacker to write beyond the bounds of the array by providing a satellite count up to 255, leading to memory corruption, Denial of Service (DoS), and potentially arbitrary code execution.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-67268 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0138 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0138