Vulnerability CVE-2022-39837
Published: 2022-10-25

Description:
An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a NULL pointer dereference,

See advisories in our WLB2 database:
Topic
Author
Date
High
COVESA 2.18.8 NULL Pointer Dereference / Heap Buffer Over-Read
T. Weber
27.09.2022

 References:
https://seclists.org/fulldisclosure/2022/Sep/24
https://sec-consult.com/vulnerability-lab/advisory/multiple-memory-corruption-vulnerabilities-in-covesa-dlt-daemon/
Copyright 2024, cxsecurity.com

 

Back to Top