CVE-2025-67268

Name of the Vulnerable Software and Affected Versions gpsd versions prior to commit dc966aa

Description The software contains a heap-based out-of-bounds write issue in the drivers/driver nmea2000.c file. The hnd 129540 function, responsible for processing NMEA2000 PGN 129540 packets (GNSS Satellites in View), does not properly validate the user-supplied satellite count against the size of the skyview array (184 elements). An attacker can exploit this by providing a satellite count of up to 255, resulting in a write beyond the array boundaries, leading to memory corruption and potential Denial of Service (DoS), and potentially arbitrary code execution.

Recommendations Update gpsd to commit dc966aa or a later version.