Security Advisory

CVE-2022-39836

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-10-24 00:00:00
Last updated 2025-05-07 14:22:21
Assigner mitre
State PUBLISHED

Description

An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte.