CVE-2026-111282: falha de alta gravidade em driftregion iso14229
iso14229 before 0.10.1 Out-of-Bounds Read via Handle_0x38_RequestFileTransfer
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 0.6%
Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticated attackers bypass the file path length check. Attackers can send a short RequestFileTransfer (SID 0x38) request with filePathAndNameLength 0xFFFC-0xFFFF, causing callbacks to read past the receive buffer, crashing targets or disclosing memory.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
driftregion · iso14229CVEs relacionadas — driftregion iso14229
No mesmo produto, das mais perigosas para as menos.
Referências
https://github.com/driftregion/iso14229https://github.com/driftregion/iso14229/blob/0.10.0/src/server.c#L1151-L1161https://github.com/driftregion/iso14229/commit/2e36afcd7f0cd02b0c70446c1a265a7b1999d478https://github.com/driftregion/iso14229/releases/tag/0.10.1%2B9e7c47e8https://github.com/driftregion/iso14229/security/advisories/GHSA-5hgv-5fqg-8vcrhttps://github.com/driftregion/iso14229/security/advisories/GHSA-ph4f-7v39-8hgmhttps://www.vulncheck.com/advisories/iso14229-before-0.10.1-out-of-bounds-read-via-handle-0x38-requestfiletransfer