Cyber Posture

CVE-2026-42468

High

Published: 01 May 2026

Published
01 May 2026
Modified
07 May 2026
KEV Added
Patch
CVSS Score 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.0018 38.8th percentile
Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Description

Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted PCAP input.

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly remediates the buffer overflow flaw in the OVMS3 PCAP parser by requiring identification, testing, and deployment of patches for this specific vulnerability.

prevent

Mandates validation of information inputs like the phdr.len field in crafted PCAP files to prevent stack-based buffer overflows.

prevent

Implements memory safeguards such as non-executable stacks and address space randomization to mitigate arbitrary code execution from the buffer overflow exploit.

Security SummaryAI

CVE-2026-42468 is a buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005. The flaw occurs in the canformat_pcap.cpp file, where the parser does not properly validate the phdr.len field. Published on 2026-05-01, it is classified under CWE-121 (Stack-based Buffer Overflow) and carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

Remote attackers without privileges can exploit the vulnerability by supplying crafted PCAP input, leading to a denial of service or potentially arbitrary code execution. The attack requires user interaction, such as opening or processing the malicious PCAP file within the affected OVMS3 environment.

Mitigation details are available in the referenced advisory at https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381.

Details

CWE(s)

MITRE ATT&CK Enterprise TechniquesAI

T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
T1204.002 Malicious File Execution
An adversary may rely upon a user opening a malicious file in order to gain execution.
Why these techniques?

Stack-based buffer overflow in PCAP parser enables client-side code execution via crafted malicious file requiring user interaction to open/process.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

References