CVE-2026-37537 - Vulnerability Analysis

Overview

collin80/Open-SAE-J1939 contains an integer underflow caused by subtracting 1 from a sequence number in Transport Protocol Data Transfer handling, letting attackers cause out-of-bounds write, exploit requires crafted CAN frame with sequence number 0.

Severity & Score

Impact

Attackers can cause out-of-bounds write, potentially leading to memory corruption or denial of service.

Mitigation

Update to the latest version including the fix for integer underflow in Transport Protocol Data Transfer handling.

References

• https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381
• https://github.com/DanielMartensson/Open-SAE-J1939
• https://github.com/collin80/Open-SAE-J1939

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner