CVE-2025-67269

An integer underflow vulnerability exists in the "nextstate" function in "gpsd/packet.c" of gpsd versions prior to commit "ffa1d6f40bca0b035fc7f5e563160ebb67199da7". When parsing a NAVCOM packet, the payload length is calculated using "lexer-length = sizetc - 4" without checking if the input byte...