cve/2022/CVE-2022-39837.md

CVE-2022-39837

Description

An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a NULL pointer dereference,

POC

Reference

• https://sec-consult.com/vulnerability-lab/advisory/multiple-memory-corruption-vulnerabilities-in-covesa-dlt-daemon/
• https://seclists.org/fulldisclosure/2022/Sep/24

Github

No PoCs found on GitHub currently.