Vendors / COVESA Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now COVESA records in CISA KEV No COVESA vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI) dlt-daemon through 2.18.8.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01209 · Published 2023-02-27 · No fix listed CWE-401
Priority MEDIUM 54
A vulnerability, which was classified as problematic, has been found in COVESA vsomeip up to 3.4.10.
CVSS 3.1 MEDIUM 4.4· Local · Low privileges · No interaction · EPSS 0.0019 · Published 2024-04-19 · No fix listed CWE-362
Priority MEDIUM 50
COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing…
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.03954 · Published 2026-08-17 · No fix listed CWE-121
Priority MEDIUM 44
COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by…
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00549 · Published 2026-08-17 · No fix listed CWE-197
Priority MEDIUM 41
Connected Vehicle Systems Alliance (COVESA) up to v2.18.8 was discovered to contain a buffer overflow via the component /shared/dlt_common.c.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01117 · Published 2023-10-17 · No fix listed CWE-120
Open these records in search → All records by CVSS severity
0 4 1 0 0
THREATIST.IORead the docs