CVE-2022-39836

 

Published at: - 25-10-2022 07:15

Last modified: - 25-10-2022 07:31

Total changes: - 1

Description

An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte.

Common Vulnerability Scoring System (CVSS)

-

 

Verification logic

 

Reference

• https://seclists.org/fulldisclosure/2022/Sep/24
• https://sec-consult.com/vulnerability-lab/advisory/multiple-memory-corruption-vulnerabilities-in-covesa-dlt-daemon/

 

Keywords

NVD

 

CVE-2022-39836

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures