MEDIUM🇵🇱 Wersja polska

CVE-2023-43628

CVSS 5.9v3.1pub. 2023-12-05upd. 2025-11-04

An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Gpsd Project Gpsd

    APP
    Gpsd Project
    3.25.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-67268CRITICAL9.8PL ✓ten sam produkt

Heap buffer overflow w gpsd — przepełnienie bufora w obsłudze NMEA2000 PGN 129540

CVE-2025-67269HIGH7.5ten sam produkt

An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions pr...

CVE-2018-17937HIGH8.8ten sam produkt

gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buff...

CVE-2013-2038MEDIUM4.3ten sam produkt

The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service (daemon terminatio...