Covesa vulnerabilities
We track 3 vulnerabilities in Covesa products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 17, 2026.
Latest Covesa vulnerabilities
- 7.5 High severity
Open1722: Numeric Truncation Error
COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected UDP datagram with a
- 7.5 High severity
Open1722: Stack-based Buffer Overflow
COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing more than 15 ACF-CAN messages. The avtp_
- 7.5 High severity
dlt-daemon: Missing Release of Memory after Effective Lifetime
An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI) dlt-daemon through 2.18.8. Dynamic memory is not released after it is allocated in dlt-control-common.c.