CVE-2026-43988

HighCVSS 7.5

Published: 26/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

Vanetza, an open-source implementation of the ETSI C-ITS protocol suite, in version 26.02 and earlier, has a denial-of-service vulnerability in the ASN.1/OER parsing pipeline. When processing malformed network packets with corrupted ASN.1/OER structures, the ASN.1 wrapper raises a std::runtime_error that is not caught, leading to std::terminate and process termination.

Risk Assessment

An attacker can send a specially crafted packet, causing the Vanetza process to crash, disrupting vehicle communication services and potentially endangering traffic safety.

Recommendation

Apply the fix available in commit 62dfe58a8342512b6e1947d75821402ada524f1a or update Vanetza to a version containing this patch. Implement input validation mechanisms.

Other vulnerabilities in Vanetza

CVE-2026-44905High
Vanetza in version 26.02 and earlier contains a denial-of-service vulnerability in the cryptographic verification pipeline. When processing incoming V2X messages, the ASN.1 decoder accepts the structure as syntactically valid but does not enforce semantic constraints. Later OER re-encoding detects the violation and raises an exception that is not caught, leading to immediate process termination.

Original NVD description (English source)

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing corrupted ASN.1/OER structures (e.g., invalid length fields or malformed certificate encoding), the ASN.1 wrapper (asn1c_wrapper.cpp) raises a std::runtime_error. This exception is not caught at the parsing boundary and propagates to std::terminate, resulting in process termination. This vulnerability is fixed with commit 62dfe58a8342512b6e1947d75821402ada524f1a.