Kosma Minmea Stack Buffer Overflow Vulnerability

A stack buffer overflow vulnerability has been identified in Kosma Minmea version 0.3.0. The issue arises in the 'minmea_scan' function, where the format specifier copies NMEA field data to a user-provided buffer without specifying a size limit. This flaw allows for a buffer overflow when the function processes untrusted input, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability causes a stack buffer overflow, which can lead to arbitrary code execution.

Reproduction

To reproduce this vulnerability, an application must use the 'minmea_scan' function to parse NMEA sentences from an untrusted source, such as a GPS receiver or a serial line. An attacker can spoof the GPS signal or perform a man-in-the-middle attack on the serial line to inject malicious NMEA sentences that contain overly long fields, causing the application's stack buffer to overflow.