CVE-2026-54413

Katalog CVE

CVSS 8.2 · High EPSS 0,72%

Kerentanan Out-of-bounds Read. Skor CVSS 3.1 8.2 (High) menurut CNA.

Deskripsi (NVD)

driftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds read in the Handle_0x27_SecurityAccess function in iso14229.c that allows a remote unauthenticated attacker to crash a UDS server and potentially read memory past the receive buffer by sending a single-byte 0x27 SecurityAccess request that follows any earlier well-formed 0x27 message.

Rincian

Terbit di NVD

14 Juni 2026

Terakhir diubah

10 Agustus 2026

Status NVD

Deferred

CVSS 3.1

8.2 (High), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read
CWE-191: Integer Underflow (Wrap or Wraparound)

EPSS (30 hari)

0,72% peluang dieksploitasi; lebih tinggi dari 52,5% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://cwe.mitre.org/data/definitions/125.html
• https://cwe.mitre.org/data/definitions/191.html
• https://github.com/driftregion/iso14229
• https://github.com/driftregion/iso14229/blob/main/iso14229.c#L1447