TI-2026-42839 CVE-2026-60122 · GHSA-9m96-crvq-5qcj
gpsd gpsprof Code Injection via SKY.satellites used Field
Priority LOW 38
gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an attacker who controls GPS input data to execute arbitrary OS commands by injecting malic…