CVE-2025-67268 is a critical heap-based out-of-bounds write vulnerability in gpsd's drivers/driver_nmea2000.c file. The hnd_129540 function improperly validates the user-supplied satellite count against the skyview array size (184 elements), permitting an attacker to write beyond the array bounds by supplying a satellite count up to 255. This memory corruption flaw can cause denial of service or enable arbitrary code execution. Red Hat has released security updates for Red Hat Enterprise Linux 10.0 Extended Update Support to fix this vulnerability.

Exploitation of this vulnerability can result in memory corruption, leading to denial of service conditions or potentially arbitrary code execution on affected systems running vulnerable versions of gpsd. The CVSS v3.1 base score is 9.8 (critical), reflecting the vulnerability's network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Red Hat has released official security updates for Red Hat Enterprise Linux 10.0 Extended Update Support that address this vulnerability. Users should apply these updates promptly to remediate the issue. For detailed update instructions, refer to Red Hat's advisory at https://access.redhat.com/articles/11258. Patch status is confirmed as fixed in these updates. No additional mitigation steps are indicated by the vendor.