CVE-2026-37539

CVSS 9.8 CRITICALEPSS 0.5%CWE-121

Vexday Risk Score

28Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 9.8EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

01 may 2026Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Buffer overflow vulnerability in cannelloni v2.0.0 in CAN frame parsing in parser.cpp in function parseCANFrame, and decoder.cpp in function decodeFrame allowing remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted CAN FD frames.

CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N

Productos afectados

n/a · n/a

Referencias

https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381 https://github.com/mguentner/cannelloni