Findings

CVE-2026-42468

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005.

Published May 1, 2026 · updated Jun 17, 2026 · openvehicles open vehicle monitoring system firmware

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted PCAP input.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. May 1, 2026 · NIST NVD

    Detected

    Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted PCAP input.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted PCAP input.

Affected

  • cpe openvehicles/open vehicle monitoring system firmware3.3.005

Sources

  • CVE.orgVulnerability recordCVE-2026-42468

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-42468

    Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted PCAP input.

    nvd.nist.gov

References