The vulnerability in kosma minmea 0.3.0 involves the minmea_scan functions which use format specifiers to copy NMEA field data into buffers without size constraints. This lack of bounds checking can cause a stack buffer overflow when handling untrusted input data. The vulnerability is publicly known but lacks a CVSS score and no official fix or patch information is available. Exploitation could result in memory corruption or potential code execution depending on the context of use.

Applications using the vulnerable minmea_scan functions on untrusted input are susceptible to stack buffer overflow, which may lead to memory corruption. No specific impact details such as remote code execution or denial of service are provided. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid processing untrusted input with the vulnerable minmea_scan functions or implement manual input validation and bounds checking to mitigate overflow risk.