Read the docs

driftregion

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

driftregion records in CISA KEV

No driftregion vulnerabilities are listed in CISA KEV.

Records

2 records

Priority HIGH 77

Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticated attackers bypass the file path length check.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00614 Published 2026-10-15 Fixed in 0.10.1 CWE-190
Priority MEDIUM 40

driftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds read in the Handle_0x27_SecurityAccess function in iso14229.c that allows a remote unauthenticated attacker to crash a UDS ser…

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.00407 Published 2026-06-14 No fix listed CWE-125
Open these records in search →