CVE-2022-39836

Name of the Vulnerable Software and Affected Versions Connected Vehicle Systems Alliance (COVESA) dlt-daemon versions 2.18.8 and earlier

Description An issue was discovered due to a faulty DLT file parser, allowing a crafted DLT file to crash the process. This is caused by missing validation checks, resulting in a heap-based buffer over-read of one byte.

Recommendations For versions 2.18.8 and earlier, update to a version later than 2.18.8 to resolve the issue. As a temporary workaround, consider validating DLT files before processing them to minimize the risk of exploitation.