CVE-2016-8596

Buffer overflow in the csp_can_process_frame in csp_if_can.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2016-10-28

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Libcsp (Libcsp)

References

• http://www.securityfocus.com/bid/94226
• https://github.com/GomSpace/libcsp/pull/80