Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Transport_Protocol_Data_Tr…

Published:

30 april 2026 om 22:00:00

Alert date:

1 mei 2026 om 21:01:21

Source:

nvd.nist.gov

Mobile & IoT, Critical Infrastructure

Integer underflow vulnerability in Open-SAE-J1939 library through commit b6caf884df46435e539b1ecbf92b6c29b345bdfe dated 2025-11-30. The vulnerability exists in the SAE_J1939_Read_Transport_Protocol_Data_Transfer function and allows attackers to write to arbitrary memory locations. Exploitation occurs through crafted sequence numbers transmitted via CAN frames. This affects automotive and industrial systems using the SAE J1939 communication protocol. The vulnerability could potentially allow remote code execution or system compromise in affected CAN-based networks.

Technical details

Mitigation steps:

Affected products:

Open-SAE-J1939