CVE-2026-42469
HighSummary
CVE-2026-42469 describes a buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005. The parser in canformat_canswitch.cpp does not properly validate a CANswitch DLC value, allowing remote attackers to cause a denial of service or potentially execute arbitrary code via crafted CANswitch frames.
Risk Assessment
Organizations may be exposed to attacks that lead to denial of service or execution of malicious code, which can result in serious security implications for the system.
Recommendation
It is recommended to update the OVMS3 system to the latest version that includes security patches and to implement additional protective measures against remote attacks.
Other vulnerabilities in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005
See all- CVE-2026-42468High
CVE-2026-42468 describes a buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005. The phdr.len field in the parser in canformat_pcap.cpp is not properly validated, allowing remote attackers to cause a denial of service or potentially execute arbitrary code via crafted PCAP input.
- CVE-2026-37541Critical
CVE-2026-37541 describes a buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005. Improper validation of the length field in GVRET binary data allows remote attackers to cause a denial of service or potentially execute arbitrary code via crafted GVRET frames.
Original NVD description (English source)
Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser does not properly validate a CANswitch DLC value, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted CANswitch frames.