A buffer overflow vulnerability exists in Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005. The flaw occurs in the canformat_gvret.cpp component where the length field in GVRET binary data is not properly validated. This can allow remote attackers to cause denial of service or potentially execute arbitrary code by sending crafted GVRET frames.