Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out-of-bounds read in the ISO-TP Single Frame receive handler, where the 4-bit payload length nibble is used directly as the memcpy size without validating it against the actual CAN data length. A malicious CAN frame with an oversized length nibble can cause memory reads beyond the buffer, allowing attackers to cause a denial of service, or gain sensitive information.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-37535 openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out-of-bounds read in the ISO-TP Single Frame receive handler, where the … https://www.cve.org/CVERecord?id=CVE-2026-37535
Post summary
The post highlights CVE-2026-37535 as an out‑of‑bounds read flaw in the ISO‑TP Single Frame receive handler, citing a specific commit and pointing readers to the CVE record.
CVE-2026-37535 Out-of-Bounds Read in openxc/isotp-c ISO-TP Single Frame Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-37535
Post summary
The post states that CVE‑2026‑37535 is an out‑of‑bounds read in openxc/isotp‑c's ISO‑TP single frame handler, but does not provide any PoC, exploit, patch, or active exploitation details.
🚨*CVE* CVE-2026-37535 openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out-of-bounds read in the ISO-TP Single Frame receive handler, where the … https://www.cve.org/CVERecord?id=CVE-2026-37535 ----- Traducción: CVE-2026-37535 ope… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-37535, detailing an out-of-bounds read in openxc/isotp-c’s ISO-TP handler, without providing evidence of exploitation, patches, or a PoC.