GP
Product
Gpsd
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 0Low 0
Watch
Add Gpsd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-67268 | 9.8 | Jan 2 | gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file Affected: before 3.27.1 |
| CVE-2026-58459 | 9.6 | Jul 9 | gpsd gpsprof Command Injection via gnuplot plot title subtype field Affected: through 3.27.5 |
| CVE-2018-17937 | 8.8 | Mar 13 | gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to execute arbitrary… Affected: 2.90 through 3.17 |
| CVE-2025-67269 | 7.5 | Jan 2 | An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67199da7` Affected: before 3.27.1 |
| CVE-2023-43628 | 7.5 | Dec 5 | An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev Affected: 3.25.1 |
| CVE-2013-2038 | – | Feb 6 | The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service (daemon termination) and possibly execute arbitrary code via a GPS packet with a… Affected: through 3.8; 3.0; 3.1; 3.2; 3.3; 3.4; +3 more |
Showing 6