Skip to content
OpenAdvisories
Critical DLA-4441-1 2 CVEs

gpsd - security update

Published Jan 19, 2026 · Updated Jan 19, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 11 gpsd 3.22-4+deb11u1

Vulnerabilities 2

  • Critical 9.8

    gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c fil…

  • High 7.5

    An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to co…