CVE-2025-67268 Memory corruption in n/a
Heap-based out-of-bounds write in gpsd allows attackers to cause denial of service or execute arbitrary code via malformed NMEA2000 packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-67268?
CVE-2025-67268 is a critical memory corruption vulnerability in n/a, published on 2 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN 129540 (GNSS Satellites in View) packets, fails to validate the user-supplied satellite count against the size of the skyview array (184 elements). This allows an attacker to write beyond the bounds of the array by providing a satellite count up to 255, leading to memory corruption, Denial of Service (DoS), and potentially arbitrary code execution.
Which versions are affected by CVE-2025-67268?
It affects 1 product.
Linux distribution packages (7)
gpsd Red Hat:enterprise_linux_eus:10.0 | All versions | 1:3.25-17.el10_0.1 |
gpsd-clients Red Hat:enterprise_linux_eus:10.0 | All versions | 1:3.25-17.el10_0.1 |
gpsd-clients-debuginfo Red Hat:enterprise_linux_eus:10.0 | All versions | 1:3.25-17.el10_0.1 |
gpsd-debuginfo Red Hat:enterprise_linux_eus:10.0 | All versions | 1:3.25-17.el10_0.1 |
gpsd-debugsource Red Hat:enterprise_linux_eus:10.0 | All versions | 1:3.25-17.el10_0.1 |
python3-gpsd Red Hat:enterprise_linux_eus:10.0 | All versions | 1:3.25-17.el10_0.1 |
python3-gpsd-debuginfo Red Hat:enterprise_linux_eus:10.0 | All versions | 1:3.25-17.el10_0.1 |
Products include Gpsd Project Gpsd.
How do I fix CVE-2025-67268?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-67268 being exploited?
There is no known exploitation of CVE-2025-67268 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2025-67268, GHSA-mp8p-xhgf-rpjv, RHSA-2026:1621, UBUNTU-CVE-2025-67268.