CVE-2022-39837

Name of the Vulnerable Software and Affected Versions Connected Vehicle Systems Alliance (COVESA) dlt-daemon versions through 2.18.8

Description An issue was discovered due to a faulty DLT file parser, allowing a crafted DLT file to crash the process. This is caused by missing validation checks, resulting in a NULL pointer dereference.

Recommendations For versions through 2.18.8, consider disabling the DLT file parser functionality until a patch is available to prevent potential crashes due to crafted DLT files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.