CVE-2026-29974

An issue was discovered in kosma minmea 0.3.0. The minmea_scan functions format specifier copies NMEA field data to a caller-provided buffer without a size parameter. Applications using minmea_scan on untrusted input are vulnerable to a stack buffer overflow.

• CWE-121

• https://gist.github.com/dwilliams27/6d4d8077b970f35e1a921c897ce13852
• https://github.com/kosma/minmea/blob/master/minmea.c#L231-L240

Published

May 8, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-29964HSC MailInspector v5.3.3-7 contains a Cross-Site Scripting (…6.1
• CVE-2026-29965HSC MailInspector 5.3.3-7 is vulnerable to Cross Site Script…6.1
• CVE-2026-29969A cross-site scripting (XSS) vulnerability in the wff_cols_p…6.1
• CVE-2026-2997Tronclass developed by WisdomGarden has a Insecure Direct Ob…6.5
• CVE-2026-29971A reflected cross-site scripting (XSS) vulnerability exists …6.1
• CVE-2026-29972nanoMODBUS through v1.22.0 has a stack-based buffer overflow…8.2
• CVE-2026-29975lwjson 1.8.1 contains an improper input validation vulnerabi…7.5
• CVE-2026-29976Buffer Overflow vulnerability in ZerBea hcxpcapngtool v. 7.0…6.2
• CVE-2026-2998ERP developed by eAI Technologies has a DLL Hijacking vulner…8.5
• CVE-2026-2999IDExpert Windows Logon Agent developed by Changing has a Rem…9.8
• CVE-2026-3000IDExpert Windows Logon Agent developed by Changing has a Rem…9.8
• CVE-2026-30006XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun …6.2