CVE-2026-73522 is a stack buffer overflow vulnerability in COVESA Open1722 through version 0.9.2. The avtp_to_can() function increments a write index without verifying it against the fixed size of a 15-slot stack array. An attacker can exploit this by sending a UDP datagram containing more than 15 ACF-CAN messages to the listener, which accepts unauthenticated datagrams with a hardcoded stream ID transmitted in plaintext. This allows memory corruption on the stack, potentially enabling arbitrary code execution or denial of service.

The vulnerability allows unauthenticated remote attackers to corrupt adjacent stack memory, which can lead to arbitrary code execution or denial of service conditions. Because the listener accepts unauthenticated datagrams, no privileges or user interaction are required for exploitation. The CVSS 4.0 base score is 8.7 (high severity), reflecting the network attack vector, no required privileges or user interaction, and high impact on integrity and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting network access to the affected service to trusted sources only to reduce exposure. Monitor vendor channels for official patches or updates addressing this vulnerability.