CVE-2026-44905: CWE-248: Uncaught Exception in riebl vanetza
Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza. When processing incoming V2X messages, the ASN.1 decoder accepts the structure as syntactically valid. However, this reveals a logic-based protocol failure where semantic constraints on specific fields are only strictly enforced during OER re-encoding. Specifically, if a crafted packet contains a certificate where the Psid (Provider Service Identifier) sub-type violates subtype constraints (e.g., out-of-range or invalid CHOICE variant), it is accepted during initial parsing, where subtype constraints are not enforced. Later, when StraightVerifyService attempts to calculate a message hash for cryptographic verification, it must re-encode the signing certificate. The underlying ASN.1 wrapper (asn1c_wrapper.cpp) detects the semantic violation during encoding and raises a std::runtime_error. This exception is not caught within the encoding path and propagates to std::terminate, resulting in immediate process termination. This vulnerability is fixed with commit e1a2e2709210d309458c3d77f98d50dec26c0df0.
AI Analysis
Technical Summary
Vanetza versions up to 26.02 contain a denial-of-service vulnerability in the cryptographic verification pipeline caused by improper enforcement of semantic constraints on the Psid field during ASN.1 decoding of V2X messages. While initial parsing accepts malformed Psid subtypes, re-encoding during signature verification detects the violation and throws an uncaught std::runtime_error, causing the process to terminate abruptly. This vulnerability is tracked as CWE-248 (Uncaught Exception). It has a CVSS 3.1 score of 7.5 (High) with network attack vector, low attack complexity, no privileges or user interaction required, and impacts availability only. The issue is fixed in commit e1a2e2709210d309458c3d77f98d50dec26c0df0.
Potential Impact
Successful exploitation causes immediate termination of the vanetza process handling V2X messages, resulting in denial of service. There is no impact on confidentiality or integrity. The vulnerability can be triggered remotely without authentication or user interaction.
Mitigation Recommendations
A fix is available and has been implemented in commit e1a2e2709210d309458c3d77f98d50dec26c0df0. Since vanetza is a cloud-hosted service, the vendor manages remediation server-side. Users should verify that their deployments are updated to this commit or later. Patch status is confirmed by the vendor advisory. No additional mitigation actions are required beyond applying the official fix.
CVE-2026-44905: CWE-248: Uncaught Exception in riebl vanetza
Description
Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza. When processing incoming V2X messages, the ASN.1 decoder accepts the structure as syntactically valid. However, this reveals a logic-based protocol failure where semantic constraints on specific fields are only strictly enforced during OER re-encoding. Specifically, if a crafted packet contains a certificate where the Psid (Provider Service Identifier) sub-type violates subtype constraints (e.g., out-of-range or invalid CHOICE variant), it is accepted during initial parsing, where subtype constraints are not enforced. Later, when StraightVerifyService attempts to calculate a message hash for cryptographic verification, it must re-encode the signing certificate. The underlying ASN.1 wrapper (asn1c_wrapper.cpp) detects the semantic violation during encoding and raises a std::runtime_error. This exception is not caught within the encoding path and propagates to std::terminate, resulting in immediate process termination. This vulnerability is fixed with commit e1a2e2709210d309458c3d77f98d50dec26c0df0.
CVSS v3.1
Score 7.5high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Vanetza versions up to 26.02 contain a denial-of-service vulnerability in the cryptographic verification pipeline caused by improper enforcement of semantic constraints on the Psid field during ASN.1 decoding of V2X messages. While initial parsing accepts malformed Psid subtypes, re-encoding during signature verification detects the violation and throws an uncaught std::runtime_error, causing the process to terminate abruptly. This vulnerability is tracked as CWE-248 (Uncaught Exception). It has a CVSS 3.1 score of 7.5 (High) with network attack vector, low attack complexity, no privileges or user interaction required, and impacts availability only. The issue is fixed in commit e1a2e2709210d309458c3d77f98d50dec26c0df0.
Potential Impact
Successful exploitation causes immediate termination of the vanetza process handling V2X messages, resulting in denial of service. There is no impact on confidentiality or integrity. The vulnerability can be triggered remotely without authentication or user interaction.
Mitigation Recommendations
A fix is available and has been implemented in commit e1a2e2709210d309458c3d77f98d50dec26c0df0. Since vanetza is a cloud-hosted service, the vendor manages remediation server-side. Users should verify that their deployments are updated to this commit or later. Patch status is confirmed by the vendor advisory. No additional mitigation actions are required beyond applying the official fix.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-07T21:50:33.547Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Is Cloud Service
- true
Threat ID: 6a161539e29bf47b506c53a3
Added to database: 05/26/2026, 21:48:41 UTC
Last enriched: 05/26/2026, 22:04:03 UTC
Last updated: 07/31/2026, 23:05:26 UTC
Views: 78
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.