CVE-2026-42468
HighSummary
CVE-2026-42468 describes a buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005. The phdr.len field in the parser in canformat_pcap.cpp is not properly validated, allowing remote attackers to cause a denial of service or potentially execute arbitrary code via crafted PCAP input.
Risk Assessment
Organizations may be exposed to remote attacks that could lead to denial of service or unauthorized code execution, resulting in serious security implications for the system.
Recommendation
It is recommended to update the OVMS3 system to the latest version that includes security patches and to monitor the system for suspicious activity.
Other vulnerabilities in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005
See all- CVE-2026-42469High
CVE-2026-42469 describes a buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005. The parser in canformat_canswitch.cpp does not properly validate a CANswitch DLC value, allowing remote attackers to cause a denial of service or potentially execute arbitrary code via crafted CANswitch frames.
- CVE-2026-37541Critical
CVE-2026-37541 describes a buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005. Improper validation of the length field in GVRET binary data allows remote attackers to cause a denial of service or potentially execute arbitrary code via crafted GVRET frames.
Original NVD description (English source)
Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted PCAP input.