GP
Vendor
Gpsd Project
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-58459 | GP Gpsd Gpsd Project | 9.6 | Jul 9 | gpsd gpsprof Command Injection via gnuplot plot title subtype field |
| CVE-2025-67268 | GP Gpsd Gpsd Project | 9.8 | Jan 2 | gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file |
| CVE-2025-67269 | GP Gpsd Gpsd Project | 7.5 | Jan 2 | An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67199da7` |
| CVE-2023-43628 | GP Gpsd Gpsd Project | 7.5 | Dec 5 | An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev |
| CVE-2018-17937 | GP Gpsd Gpsd Project | 8.8 | Mar 13 | gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to execute arbitrary… |
| CVE-2013-2038 | GP Gpsd Gpsd Project | – | Feb 6 | The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service (daemon termination) and possibly execute arbitrary code via a GPS packet with a… |