CVE-2026-56790

Katalog CVE

CVSS 7.3 · High EPSS 0,31%

Kerentanan Off-by-one Error. Skor CVSS 3.1 7.3 (High) menurut vulncheck.com.

Deskripsi (NVD)

CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in the searchForPgn() function in analyzer/pgn.c that allows remote attackers to crash the application. Attackers can deliver a crafted NMEA-2000 message with an out-of-range PGN value over CAN bus or N2K-over-IP to trigger an out-of-bounds array access and denial of service.

Rincian

Terbit di NVD

25 Juni 2026

Terakhir diubah

14 Juli 2026

Status NVD

Deferred

CVSS 3.1

7.3 (High), sumber vulncheck.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-193: Off-by-one Error

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 21,9% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/canboat/canboat/commit/a5a22b74b9ac5688019cba62669df08562cebd6f
• https://github.com/canboat/canboat/issues/644
• https://github.com/canboat/canboat/pull/649
• https://www.vulncheck.com/advisories/canboat-off-by-one-global-buffer-overflow-in-searchforpgn