CVE-2026-42467

High

Published: 01/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An issue was discovered in Open-SAE-J1939 that leads to denial of service via crafted CAN frames on the J1939 bus. This issue was identified in commit b6caf884df46435e539b1ecbf92b6c29b345bdfe on November 30, 2025.

Risk Assessment

The organization may experience downtime in systems utilizing the J1939 bus, potentially leading to significant operational disruptions.

Recommendation

It is recommended to update to the latest version of Open-SAE-J1939 to mitigate this vulnerability and secure systems against attacks.

Other vulnerabilities in Open-SAE-J1939

CVE-2026-37534Critical
CVE-2026-37534 describes an integer underflow vulnerability in Open-SAE-J1939, allowing attackers to write to arbitrary memory via a crafted sequence number from the CAN frame.

Original NVD description (English source)

An issue was discovered in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Binary_Data_Transfer_DM16 causing a denial of service via crafted CAN frame on the J1939 bus.