← Back to Security Research Portal (ccsimplyspolit.github.io)

GHSA-xvmx-7qq5-34q6: Out-of-Bounds Read/Write via Unchecked IEEE 1722 ACF Message & CAN Padding Lengths (COVESA/Open1722)

[ACCEPTED BY VENDOR (DRAFT GHSA) • CVE REQUESTED • PATCHED IN PR #69 (COMMIT 78de7ef)]
Privately reported to COVESA/Open1722 via GitHub Private Vulnerability Reporting (GHSA-xvmx-7qq5-34q6) covering IEEE 1722-2016 ACF message demultiplexing and CAN/LIN/Most/GPC/Serial/Ancillary payload bounds validation.
Accepted into draft state with CVE requested from GitHub CNA and patched in merged Pull Request #69 (commit 78de7ef).

0x00 // GitHub Security Advisory & Remediation Metadata

{
  "ghsa_id": "GHSA-xvmx-7qq5-34q6",
  "repository": "COVESA/Open1722",
  "html_url": "https://github.com/COVESA/Open1722/security/advisories/GHSA-xvmx-7qq5-34q6",
  "fix_pr": "https://github.com/COVESA/Open1722/pull/69",
  "fix_commit": "https://github.com/COVESA/Open1722/commit/78de7ef",
  "state": "draft (accepted by vendor, CVE requested)",
  "severity": "critical",
  "cvss_v3": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "credits": [
    {
      "login": "ccsimplyspolit",
      "type": "reporter",
      "state": "accepted"
    }
  ],
  "cwe_ids": [
    "CWE-125",
    "CWE-191",
    "CWE-787"
  ]
}