CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-67269

An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67199da7`. When parsing a NAVCOM packet, the payload length is calculated using `lexer->length = (size_t)c - 4` without checking if the input byte `c` is less than 4. This results in an unsigned integer underflow, setting `lexer->length` to a very large value (near `SIZE_MAX`). The parser then enters a loop attempting to consume this massive number of bytes, causing 100% CPU utilization and a Denial of Service (DoS) condition.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.2%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2025-67269

Gpsd Project » Gpsd » Version: 0.7

cpe:2.3:a:gpsd_project:gpsd:0.7
Gpsd Project » Gpsd » Version: 0.8

cpe:2.3:a:gpsd_project:gpsd:0.8
Gpsd Project » Gpsd » Version: 0.9

cpe:2.3:a:gpsd_project:gpsd:0.9
Gpsd Project » Gpsd » Version: 0.93

cpe:2.3:a:gpsd_project:gpsd:0.93
Gpsd Project » Gpsd » Version: 0.94

cpe:2.3:a:gpsd_project:gpsd:0.94
Gpsd Project » Gpsd » Version: 0.95

cpe:2.3:a:gpsd_project:gpsd:0.95
Gpsd Project » Gpsd » Version: 0.96

cpe:2.3:a:gpsd_project:gpsd:0.96
Gpsd Project » Gpsd » Version: 0.99

cpe:2.3:a:gpsd_project:gpsd:0.99
Gpsd Project » Gpsd » Version: 1.0

cpe:2.3:a:gpsd_project:gpsd:1.0
Gpsd Project » Gpsd » Version: 1.01

cpe:2.3:a:gpsd_project:gpsd:1.01
Gpsd Project » Gpsd » Version: 1.02

cpe:2.3:a:gpsd_project:gpsd:1.02
Gpsd Project » Gpsd » Version: 1.05

cpe:2.3:a:gpsd_project:gpsd:1.05
Gpsd Project » Gpsd » Version: 1.06

cpe:2.3:a:gpsd_project:gpsd:1.06
Gpsd Project » Gpsd » Version: 1.07

cpe:2.3:a:gpsd_project:gpsd:1.07
Gpsd Project » Gpsd » Version: 1.08

cpe:2.3:a:gpsd_project:gpsd:1.08
Gpsd Project » Gpsd » Version: 1.10

cpe:2.3:a:gpsd_project:gpsd:1.10
Gpsd Project » Gpsd » Version: 1.90

cpe:2.3:a:gpsd_project:gpsd:1.90
Gpsd Project » Gpsd » Version: 1.91

cpe:2.3:a:gpsd_project:gpsd:1.91
Gpsd Project » Gpsd » Version: 1.92

cpe:2.3:a:gpsd_project:gpsd:1.92
Gpsd Project » Gpsd » Version: 1.93

cpe:2.3:a:gpsd_project:gpsd:1.93
Gpsd Project » Gpsd » Version: 1.94

cpe:2.3:a:gpsd_project:gpsd:1.94
Gpsd Project » Gpsd » Version: 1.95

cpe:2.3:a:gpsd_project:gpsd:1.95
Gpsd Project » Gpsd » Version: 1.96

cpe:2.3:a:gpsd_project:gpsd:1.96
Gpsd Project » Gpsd » Version: 1.97

cpe:2.3:a:gpsd_project:gpsd:1.97
Gpsd Project » Gpsd » Version: 1.98

cpe:2.3:a:gpsd_project:gpsd:1.98
Gpsd Project » Gpsd » Version: 2.0

cpe:2.3:a:gpsd_project:gpsd:2.0
Gpsd Project » Gpsd » Version: 2.1

cpe:2.3:a:gpsd_project:gpsd:2.1
Gpsd Project » Gpsd » Version: 2.10

cpe:2.3:a:gpsd_project:gpsd:2.10
Gpsd Project » Gpsd » Version: 2.11

cpe:2.3:a:gpsd_project:gpsd:2.11
Gpsd Project » Gpsd » Version: 2.12

cpe:2.3:a:gpsd_project:gpsd:2.12
Gpsd Project » Gpsd » Version: 2.13

cpe:2.3:a:gpsd_project:gpsd:2.13
Gpsd Project » Gpsd » Version: 2.14

cpe:2.3:a:gpsd_project:gpsd:2.14
Gpsd Project » Gpsd » Version: 2.15

cpe:2.3:a:gpsd_project:gpsd:2.15
Gpsd Project » Gpsd » Version: 2.16

cpe:2.3:a:gpsd_project:gpsd:2.16
Gpsd Project » Gpsd » Version: 2.17

cpe:2.3:a:gpsd_project:gpsd:2.17
Gpsd Project » Gpsd » Version: 2.18-1

cpe:2.3:a:gpsd_project:gpsd:2.18-1
Gpsd Project » Gpsd » Version: 2.19

cpe:2.3:a:gpsd_project:gpsd:2.19
Gpsd Project » Gpsd » Version: 2.2

cpe:2.3:a:gpsd_project:gpsd:2.2
Gpsd Project » Gpsd » Version: 2.20

cpe:2.3:a:gpsd_project:gpsd:2.20
Gpsd Project » Gpsd » Version: 2.21

cpe:2.3:a:gpsd_project:gpsd:2.21
Gpsd Project » Gpsd » Version: 2.22

cpe:2.3:a:gpsd_project:gpsd:2.22
Gpsd Project » Gpsd » Version: 2.23

cpe:2.3:a:gpsd_project:gpsd:2.23
Gpsd Project » Gpsd » Version: 2.24

cpe:2.3:a:gpsd_project:gpsd:2.24
Gpsd Project » Gpsd » Version: 2.25

cpe:2.3:a:gpsd_project:gpsd:2.25
Gpsd Project » Gpsd » Version: 2.26

cpe:2.3:a:gpsd_project:gpsd:2.26
Gpsd Project » Gpsd » Version: 2.27

cpe:2.3:a:gpsd_project:gpsd:2.27
Gpsd Project » Gpsd » Version: 2.28

cpe:2.3:a:gpsd_project:gpsd:2.28
Gpsd Project » Gpsd » Version: 2.29

cpe:2.3:a:gpsd_project:gpsd:2.29
Gpsd Project » Gpsd » Version: 2.3

cpe:2.3:a:gpsd_project:gpsd:2.3
Gpsd Project » Gpsd » Version: 2.30

cpe:2.3:a:gpsd_project:gpsd:2.30
Gpsd Project » Gpsd » Version: 2.31

cpe:2.3:a:gpsd_project:gpsd:2.31
Gpsd Project » Gpsd » Version: 2.32

cpe:2.3:a:gpsd_project:gpsd:2.32
Gpsd Project » Gpsd » Version: 2.33

cpe:2.3:a:gpsd_project:gpsd:2.33
Gpsd Project » Gpsd » Version: 2.34

cpe:2.3:a:gpsd_project:gpsd:2.34
Gpsd Project » Gpsd » Version: 2.35

cpe:2.3:a:gpsd_project:gpsd:2.35
Gpsd Project » Gpsd » Version: 2.36

cpe:2.3:a:gpsd_project:gpsd:2.36
Gpsd Project » Gpsd » Version: 2.37

cpe:2.3:a:gpsd_project:gpsd:2.37
Gpsd Project » Gpsd » Version: 2.38

cpe:2.3:a:gpsd_project:gpsd:2.38
Gpsd Project » Gpsd » Version: 2.39

cpe:2.3:a:gpsd_project:gpsd:2.39
Gpsd Project » Gpsd » Version: 2.4

cpe:2.3:a:gpsd_project:gpsd:2.4
Gpsd Project » Gpsd » Version: 2.5

cpe:2.3:a:gpsd_project:gpsd:2.5
Gpsd Project » Gpsd » Version: 2.6

cpe:2.3:a:gpsd_project:gpsd:2.6
Gpsd Project » Gpsd » Version: 2.7

cpe:2.3:a:gpsd_project:gpsd:2.7
Gpsd Project » Gpsd » Version: 2.8

cpe:2.3:a:gpsd_project:gpsd:2.8
Gpsd Project » Gpsd » Version: 2.9

cpe:2.3:a:gpsd_project:gpsd:2.9
Gpsd Project » Gpsd » Version: 2.90

cpe:2.3:a:gpsd_project:gpsd:2.90
Gpsd Project » Gpsd » Version: 2.91

cpe:2.3:a:gpsd_project:gpsd:2.91
Gpsd Project » Gpsd » Version: 2.92

cpe:2.3:a:gpsd_project:gpsd:2.92
Gpsd Project » Gpsd » Version: 2.93

cpe:2.3:a:gpsd_project:gpsd:2.93
Gpsd Project » Gpsd » Version: 2.94

cpe:2.3:a:gpsd_project:gpsd:2.94
Gpsd Project » Gpsd » Version: 2.95

cpe:2.3:a:gpsd_project:gpsd:2.95
Gpsd Project » Gpsd » Version: 2.96

cpe:2.3:a:gpsd_project:gpsd:2.96
Gpsd Project » Gpsd » Version: 3.0

cpe:2.3:a:gpsd_project:gpsd:3.0
Gpsd Project » Gpsd » Version: 3.1

cpe:2.3:a:gpsd_project:gpsd:3.1
Gpsd Project » Gpsd » Version: 3.10

cpe:2.3:a:gpsd_project:gpsd:3.10
Gpsd Project » Gpsd » Version: 3.11

cpe:2.3:a:gpsd_project:gpsd:3.11
Gpsd Project » Gpsd » Version: 3.12

cpe:2.3:a:gpsd_project:gpsd:3.12
Gpsd Project » Gpsd » Version: 3.13

cpe:2.3:a:gpsd_project:gpsd:3.13
Gpsd Project » Gpsd » Version: 3.14

cpe:2.3:a:gpsd_project:gpsd:3.14
Gpsd Project » Gpsd » Version: 3.15

cpe:2.3:a:gpsd_project:gpsd:3.15
Gpsd Project » Gpsd » Version: 3.16

cpe:2.3:a:gpsd_project:gpsd:3.16
Gpsd Project » Gpsd » Version: 3.17

cpe:2.3:a:gpsd_project:gpsd:3.17
Gpsd Project » Gpsd » Version: 3.18

cpe:2.3:a:gpsd_project:gpsd:3.18
Gpsd Project » Gpsd » Version: 3.18.1

cpe:2.3:a:gpsd_project:gpsd:3.18.1
Gpsd Project » Gpsd » Version: 3.19

cpe:2.3:a:gpsd_project:gpsd:3.19
Gpsd Project » Gpsd » Version: 3.19.1

cpe:2.3:a:gpsd_project:gpsd:3.19.1
Gpsd Project » Gpsd » Version: 3.2

cpe:2.3:a:gpsd_project:gpsd:3.2
Gpsd Project » Gpsd » Version: 3.25.1

cpe:2.3:a:gpsd_project:gpsd:3.25.1
Gpsd Project » Gpsd » Version: 3.3

cpe:2.3:a:gpsd_project:gpsd:3.3
Gpsd Project » Gpsd » Version: 3.4

cpe:2.3:a:gpsd_project:gpsd:3.4
Gpsd Project » Gpsd » Version: 3.5

cpe:2.3:a:gpsd_project:gpsd:3.5
Gpsd Project » Gpsd » Version: 3.6

cpe:2.3:a:gpsd_project:gpsd:3.6
Gpsd Project » Gpsd » Version: 3.7

cpe:2.3:a:gpsd_project:gpsd:3.7
Gpsd Project » Gpsd » Version: 3.8

cpe:2.3:a:gpsd_project:gpsd:3.8
Gpsd Project » Gpsd » Version: 3.9

cpe:2.3:a:gpsd_project:gpsd:3.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-67269

Products

Pricing

Contact Us