Open Vehicle Monitoring System 3 (OVMS3) 3.3.005 vulnerabilities
3 known CVE vulnerabilities in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005, translated and rated.
- CVE-2026-42469High
CVE-2026-42469 describes a buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005. The parser in canformat_canswitch.cpp does not properly validate a CANswitch DLC value, allowing remote attackers to cause a denial of service or potentially execute arbitrary code via crafted CANswitch frames.
- CVE-2026-42468High
CVE-2026-42468 describes a buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005. The phdr.len field in the parser in canformat_pcap.cpp is not properly validated, allowing remote attackers to cause a denial of service or potentially execute arbitrary code via crafted PCAP input.
- CVE-2026-37541Critical
CVE-2026-37541 describes a buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005. Improper validation of the length field in GVRET binary data allows remote attackers to cause a denial of service or potentially execute arbitrary code via crafted GVRET frames.