Buffer Overflow in Open Vehicle Monitoring System 3

Publication date: 2026-05-01

Last updated on: 2026-05-20

Assigner: MITRE

Description

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted PCAP input.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-01

Last Modified

2026-05-20

Generated

2026-07-06

AI Q&A

2026-05-01

EPSS Evaluated

2026-07-05

NVD

CVE-2026-42468

EUVD

EUVD-2026-26696

Affected Vendors & Products

Vendor	Product	Version / Range
openvehicles	open_vehicle_monitoring_system_firmware	3.3.005

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a buffer overflow in the Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005. Specifically, in the canformat_pcap.cpp file, the parser's phdr.len field is not properly validated. This improper validation allows remote attackers to exploit crafted PCAP input to cause a denial of service or potentially execute arbitrary code.

Impact Analysis

The impact of this vulnerability includes the possibility for remote attackers to cause a denial of service, which could disrupt the normal operation of the Open Vehicle Monitoring System. Additionally, there is a risk that attackers could execute arbitrary code, potentially gaining control over the affected system or causing further damage.

Hi! I’m here to help you understand CVE-2026-42468. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70