ZeroDay Findings
Sign inSign up

Findings

CVE-2026-42469

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005.

Published May 1, 2026 · updated Jun 17, 2026 · openvehicles open vehicle monitoring system firmware

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser does not properly validate a CANswitch DLC value, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted CANswitch frames.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. May 1, 2026 · NIST NVD

    Detected

    Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser does not properly validate a CANswitch DLC value, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted CANswitch frames.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser does not properly validate a CANswitch DLC value, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted CANswitch frames.

Affected

  • cpe openvehicles/open vehicle monitoring system firmware3.3.005

Sources

  • CVE.orgVulnerability recordCVE-2026-42469

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-42469

    Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser does not properly validate a CANswitch DLC value, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted CANswit

    nvd.nist.gov

References