{"apiVersion":"1.0","identifier":"CVE-2026-73522","description":"COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing more than 15 ACF-CAN messages. The avtp_to_can() function increments its write index without bounding it against the caller-supplied array size, and because the listener accepts datagrams from any sender matching a hardcoded unauthenticated stream ID transmitted in plaintext, attackers can corrupt adjacent stack memory to achieve arbitrary code execution or denial of service.","publishedAt":"2026-08-17T18:18:14","lastModifiedAt":"2026-08-18T15:17:08","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73522","cvssScore":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","epssProbability":0.02361,"riskScore":0.91,"affectedProduct":"Open1722","affectedVersions":"<=0.9.2","vulnerabilityType":"Library","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-73522","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-73522","en":"https://www.redsauce.net/en/cves/CVE-2026-73522","fr":"https://www.redsauce.net/fr/cves/CVE-2026-73522","pt":"https://www.redsauce.net/pt/cves/CVE-2026-73522","de":"https://www.redsauce.net/de/cves/CVE-2026-73522","sk":"https://www.redsauce.net/sk/cves/CVE-2026-73522","el":"https://www.redsauce.net/el/cves/CVE-2026-73522"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-73522"}}