9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Transport_Protocol_Data_Transfer,allows attackers to write to arbitrary memory via crafted sequence number from the CAN frame.
AI Analysis
Integer underflow vulnerability allowing arbitrary memory write via crafted CAN frame sequence number
Basic Information
ID
CVE-2026-37534
Source
mitre
Published
May 1, 2026 at 00:00
Modified
May 1, 2026 at 19:06
Affected Product
Vendor
DanielMartensson
Product
Open-SAE-J1939
Version
commit b6caf884df46435e539b1ecbf92b6c29b345bdfe
Affected Versions
n/a n/a n/a
CWE Classification
AI Assessment
AI Score
9.8 / 10
AI Severity
Critical
Vendor
DanielMartensson
Product
Open-SAE-J1939
Version
commit b6caf884df46435e539b1ecbf92b6c29b345bdfe