EUVD-2026-26696CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
6DescriptionNVD
Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted PCAP input.
AnalysisAI
Buffer overflow in Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005 enables remote code execution when processing malicious PCAP files. The canformat_pcap.cpp parser fails to validate the phdr.len field, allowing attackers to overflow stack buffers and execute arbitrary code with high confidentiality, integrity, and availability impact. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify and inventory all OVMS3 deployments across your infrastructure, particularly version 3.3.005, and notify users to avoid processing PCAP files from untrusted sources. Within 7 days: Implement file upload restrictions and network controls to prevent delivery of PCAP files to systems running OVMS3; isolate affected systems from production networks if business continuity permits. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today