CVE-2025-67269

The gpsd daemon is vulnerable to an integer underflow in the nextstate() function within the gpsd/packet.c component. This flaw occurs during NAVCOM packet parsing when the payload length is calculated as lexer->length = (size_t)c - 4 without verifying if the input byte c is less than 4. The r...