Replying to this email means your email address will be shared with the
team that works on this product.
https://issues.oss-fuzz.com/issues/477971098

Changed

[email protected] added comment #4:
I happy it is fixed, but can we hold off the full 90 days before making
public?

You just told the bad guys a new 0-day, but did not give distros enough
time to roll out the updates.
_______________________________

Reference Info: 477971098 gpsd:FuzzDrivers: Use-of-uninitialized-value in
rtcm2_unpack
component:  Public Trackers > 1362134 > OSS Fuzz
status:  Verified
reporter:  [email protected]
assignee:  [email protected]
verifier:  [email protected]
cc:  [email protected], [email protected], [email protected], and 2
more
collaborators:  [email protected]
type:  Vulnerability
access level:  Default access
priority:  P2
severity:  S2
hotlist:  ClusterFuzz-Verified, Reproducible,
Stability-Memory-MemorySanitizer
retention:  Component default
Disclosure:  Apr 23, 2026
Project:  gpsd
Reported:  Jan 23, 2026


Generated by Google IssueTracker notification system.

Reply via email to