Threats tagged 'ghsa-v288-v38p-24mh'

An out-of-bounds read vulnerability exists in openxc/isotp-c up to commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) in the ISO-TP Single Frame receive handler. The vulnerability arises because the 4-bit payload length nibble is used directly as the memcpy size without validating it against the actual CAN data length. This can allow a malicious CAN frame with an oversized length nibble to cause memory reads beyond the buffer, potentially leading to denial of service or information disclosure.