Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority HIGH 77

Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticated attackers bypass the file path length check.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00614 Published 2026-10-15 Fixed in 0.10.1 CWE-190
Priority MEDIUM 40

driftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds read in the Handle_0x27_SecurityAccess function in iso14229.c that allows a remote unauthenticated attacker to crash a UDS ser…

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.00407 Published 2026-06-14 No fix listed CWE-125