Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
collin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08) contains an integer underflow leading to out-of-bounds write in Transport Protocol Data Transfer handling. At line 23: uint8_t index = data[0] - 1. When data[0] (sequence number from CAN frame) is 0, index underflows to 255. Subsequent write at tp_dt->data[255*7 + i-1] reaches offset 1791, exceeding the MAX_TP_DT buffer (1785 bytes) by 6 bytes.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-37537 collin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08) contains an integer underflow leading to out-of-bounds write in Transport Pr… https://www.cve.org/CVERecord?id=CVE-2026-37537
Post summary
The text offers a concise disclosure of CVE-2026-37537, noting an integer underflow that results in out-of-bounds write, without any PoC, exploit, or patch information.
🚨*CVE* CVE-2026-37537 collin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08) contains an integer underflow leading to out-of-bounds write in Transport Pr… https://www.cve.org/CVERecord?id=CVE-2026-37537 ----- Traducción: CVE-2026-37537 col… http://infoflow.cloud`
Post summary
The message announces CVE-2026-37537—a commit‑based integer underflow that causes an out‑of‑bounds write in an open‑source project, linking to the CVE record and commit but not providing exploit code or a patch.