CVE-2026-37537 Integer overflow in n/a
An integer underflow in the Open-SAE-J1939 library allows out-of-bounds writes via crafted CAN frames, potentially leading to code execution or crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-37537?
CVE-2026-37537 is a high-severity vulnerability in n/a, published on 1 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
collin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08) contains an integer underflow leading to out-of-bounds write in Transport Protocol Data Transfer handling. At line 23: uint8_t index = data[0] - 1. When data[0] (sequence number from CAN frame) is 0, index underflows to 255. Subsequent write at tp_dt->data[255*7 + i-1] reaches offset 1791, exceeding the MAX_TP_DT buffer (1785 bytes) by 6 bytes.
Weakness: CWE-190
Which versions are affected by CVE-2026-37537?
How do I fix CVE-2026-37537?
No fix has been published for CVE-2026-37537 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-37537 being exploited?
There is no known exploitation of CVE-2026-37537 in the wild and no public exploit code.
Sources
Also known as GHSA-r65j-732m-pxwm.