This vulnerability involves improper exception handling in Vanetza V2X v26.02's GeoNetworking packet processing pipeline. Specifically, OpenSSL exceptions thrown during ECC point validation (such as invalid compressed points or points not on the curve) are not properly caught by the Router::indicate() call chain. Although the parser's catch block in parse_secured() is intended to handle these exceptions, they escape through subsequent processing stages (indicate_common, indicate_extended), causing the application to call std::terminate and crash the V2X receiver. This leads to a denial of service condition triggered remotely without requiring privileges or user interaction.

The vulnerability allows unauthenticated remote attackers to cause a denial of service by crashing the Vanetza V2X receiver. This disrupts the normal operation of the V2X communication system but does not impact confidentiality or integrity. There is no indication of known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No temporary or official fixes have been documented.