CVE 9.8 CRITICAL

CVE-2026-37534_CVE-2026-37534

9.8 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Transport_Protocol_Data_Transfer,allows attackers to write to arbitrary memory via crafted sequence number from the CAN frame.

AI Analysis

Integer underflow vulnerability allowing arbitrary memory write via crafted CAN frame sequence number

Basic Information

ID CVE-2026-37534
Source mitre
Published May 1, 2026 at 00:00
Modified May 1, 2026 at 19:06

Affected Product

Vendor DanielMartensson
Product Open-SAE-J1939
Version commit b6caf884df46435e539b1ecbf92b6c29b345bdfe
Affected Versions n/a n/a n/a

CWE Classification

AI Assessment

AI Score 9.8 / 10
AI Severity Critical
Vendor DanielMartensson
Product Open-SAE-J1939
Version commit b6caf884df46435e539b1ecbf92b6c29b345bdfe

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.