CVE-2026-37539 PUBLISHED

Assigner: mitre
Reserved: 06.04.2026 Published: 01.05.2026 Updated: 01.05.2026

Buffer overflow vulnerability in cannelloni v2.0.0 in CAN frame parsing in parser.cpp in function parseCANFrame, and decoder.cpp in function decodeFrame allowing remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted CAN FD frames.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
CVSS Score: 9.8

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	High
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	n/a
Product	n/a
Versions	Version n/a is affected

References

https://github.com/mguentner/cannelloni
https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381

Problem Types

n/a text