critical10.0
CVE-2026-37541
Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005.
Impact
Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length field in GVRET binary data is not properly validated, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted GVRET frames.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openvehicles | Open Vehicle Monitoring System Firmware | Version 3.3.005 |