medium5.9
CVE-2023-43628
An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev.
Impact
An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gpsd Project | Gpsd | Version 3.25.1 |