CVE Catalog

CVE-2016-8596

Critical
Published: Translated: NVD NIST

Summary

Buffer overflow in the csp_can_process_frame function in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet.

Risk Assessment

This vulnerability may lead to unauthorized access to the system and potential takeover of devices connected to the canbus network.

Recommendation

It is recommended to update the libcsp library to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Buffer overflow in the csp_can_process_frame in csp_if_can.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS