Gpsd vulnerabilities
2 known vulnerabilities affecting gpsd/gpsd.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2
Vulnerabilities
Page 1 of 1
CVE-2023-43628P3HIGHCVSS 7.5v3.25.1~dev2023-12-05
CVE-2023-43628 [HIGH] CWE-191 CVE-2023-43628: An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~d
An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability.
nvd
CVE-2026-60122P3HIGHCVSS 7.8≤ 3.27.52026-07-23
CVE-2026-60122 [HIGH] CWE-94 CVE-2026-60122: gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the
gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an attacker who controls GPS input data to execute arbitrary OS commands by injecting malicious content into the SKY.satellites[].used field, which is inserted unsanitized into a gnuplot heredoc data block. Attackers can supp
nvd