Skip to content
OpenAdvisories

Vendor

COVESA

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    COVESA Open1722 0.9.2 Stack Memory Disclosure via acf-can-listener.c Integer Truncation

    COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected UDP datagram with a…

  • High 7.5

    COVESA Open1722 0.9.2 Stack Buffer Overflow via avtp_to_can() in acf-can-listener

    COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing more than 15 ACF-CAN messages. The avtp…