CVE-2026-54413 — iso14229 Integer Underflow and Out-of-Bounds Read in Handle_0x27_SecurityAccess()
driftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds read in the Handle_0x27_SecurityAccess function in iso14229.c that allows a remote …
Published: 2026-06-14 · CVSS: 7.8 · CVSS 4.0
driftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds read in the Handle_0x27_SecurityAccess function in iso14229.c that allows a remote unauthenticated attacker to crash a UDS server and potentially read memory past the receive buffer by sending a single-byte 0x27 SecurityAccess request that follows any earlier well-formed 0x27 message.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7