CVE-2026-37541 - Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005

Back Back to CVE browser

CRITICAL

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005

Published May 1, 2026

10.0

CRITICAL

CVSS 3.1

EPSS 1.11%

Description

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length field in GVRET binary data is not properly validated, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted GVRET frames.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-121

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26694
Advisory
https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381
Third Party Advisory
https://github.com/openvehicles/Open-Vehicle-Monitoring-System-3
Product
https://github.com/openvehicles/Open-Vehicle-Monitoring-System-3/issues/1393
Issue Tracking

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26694		Advisory
https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381		Third Party Advisory
https://github.com/openvehicles/Open-Vehicle-Monitoring-System-3		Product
https://github.com/openvehicles/Open-Vehicle-Monitoring-System-3/issues/1393		Issue Tracking