Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted PCAP input.
References
| Link | Resource |
|---|---|
| https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381 | Third Party Advisory |
| https://github.com/openvehicles/Open-Vehicle-Monitoring-System-3/issues/1392 | Issue Tracking |
Configurations
Configuration 1 (hide)
| AND |
|
History
20 May 2026, 15:19
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:openvehicles:open_vehicle_monitoring_system_firmware:3.3.005:*:*:*:*:*:*:* cpe:2.3:h:openvehicles:open_vehicle_monitoring_system:-:*:*:*:*:*:*:* |
|
| First Time |
Openvehicles
Openvehicles open Vehicle Monitoring System Openvehicles open Vehicle Monitoring System Firmware |
|
| References | () https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381 - Third Party Advisory | |
| References | () https://github.com/openvehicles/Open-Vehicle-Monitoring-System-3/issues/1392 - Issue Tracking |
07 May 2026, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 May 2026, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
01 May 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-121 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
01 May 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-01 17:16
Updated : 2026-05-20 15:19
NVD link : CVE-2026-42468
Mitre link : CVE-2026-42468
CVE.ORG link : CVE-2026-42468
JSON object : View
Products Affected
openvehicles
- open_vehicle_monitoring_system
- open_vehicle_monitoring_system_firmware
CWE
CWE-121
Stack-based Buffer Overflow