CVE-2026-111282

Name of the Vulnerable Software and Affected Versions Driftregion iso14229 versions prior to 0.10.1

Description An integer wraparound exists in the Handle 0x38 RequestFileTransfer() function. This allows unauthenticated attackers to bypass the file path length check by sending a short RequestFileTransfer (SID 0x38) request with the filePathAndNameLength variable set between 0xFFFC and 0xFFFF. This can lead to callbacks reading past the receive buffer, resulting in target crashes or memory disclosure.

Recommendations Update to version 0.10.1 or later.