GeographicLib version 2.5 contains a buffer overflow vulnerability in the GeoConvert component's DMS::InternalDecode function. This flaw can lead to a denial of service due to application crash. The vulnerability has a high severity score of 7.5 and public exploit code is available.