Debian/gpsd: critical 9.8
gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN 129540 (GNSS Satellites in
Action: Upgrade gpsd to 3.25-5+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.25-5+deb13u1 | - |
Fixed versions
| 3.25-5+deb13u1 |
Sources
- osv: DEBIAN-CVE-2025-67268#Debian:13/gpsd
- https://security-tracker.debian.org/tracker/CVE-2025-67268
published · modified · JSON