OSV-2026-307
NoneCVSS
—
EPSS
—
Published
Feb 25, 2026
CISA due date
—
The record
Global-buffer-overflow in navcom_parse
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| OSS-Fuzz | gpsd | 4d719d0f956444fa8cc00d988fbb9dda878614f4 | 991de2af663565803483e3013fd7dfed48d9355b |
Related vulnerabilities
- OSV-2026-261 Segv on unknown address in ___interceptor_strtol Also affects gpsd
- OSV-2026-259 Use-of-uninitialized-value in tsip_parse_input Also affects gpsd
- OSV-2026-255 UNKNOWN WRITE in nmeaid_to_prn Also affects gpsd
- OSV-2026-240 Use-of-uninitialized-value in packet_get1 Also affects gpsd
- OSV-2026-226 UNKNOWN WRITE in decode_xa2_00 Also affects gpsd
- OSV-2026-212 UNKNOWN READ in gpsd_poll Also affects gpsd
- OSV-2026-209 Use-of-uninitialized-value in ntrip_parse_url Also affects gpsd
- OSV-2026-205 UNKNOWN READ in gpsd_poll Also affects gpsd