4 matches found
EUVD-2026-102473
Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle0x38RequestFileTransfer that lets unauthenticated attackers bypass the file path length check. Attackers can send a short RequestFileTransfer SID 0x38 request with filePathAndNameLength 0xFFFC-0xFFFF, causing callbacks to...
CVE-2026-111282: Integer Overflow or Wraparound
Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle0x38RequestFileTransfer that lets unauthenticated attackers bypass the file path length check. Attackers can send a short RequestFileTransfer SID 0x38 request with filePathAndNameLength 0xFFFC-0xFFFF, causing callbacks to...
PT-2026-115273
Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle 0x38 RequestFileTransfer that lets unauthenticated attackers bypass the file path length check. Attackers can send a short RequestFileTransfer SID 0x38 request with filePathAndNameLength 0xFFFC-0xFFFF, causing callbacks t...
Nick James Kirkby iso14229 Digital Error Vulnerability
Nick James Kirkby’s version of iso14229 0.10.1 and earlier contains a numerical error vulnerability. This vulnerability stems from an integer wrap around issue in Handle0x38RequestFileTransfer. Unauthenticated attackers can bypass the file path length check by sending a RequestFileTransfer SID 0x...