EUVD-2022-42282

Malicious code in bioql PyPI...

EUVD-2023-30081

Malicious code in bioql PyPI...

CVE-2023-26257

An issue was discovered in the Connected Vehicle Systems Alliance COVESA; formerly GENIVI dlt-daemon through 2.18.8. Dynamic memory is not released after it is allocated in dlt-control-common.c...

CVE-2022-39836

An issue was discovered in Connected Vehicle Systems Alliance COVESA dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte...

CVE-2022-39837: NULL Pointer Dereference

An issue was discovered in Connected Vehicle Systems Alliance COVESA dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a NULL pointer dereference,...

PT-2022-25026

Name of the Vulnerable Software and Affected Versions Connected Vehicle Systems Alliance COVESA dlt-daemon versions 2.18.8 and earlier Description An issue was discovered due to a faulty DLT file parser, allowing a crafted DLT file to crash the process. This is caused by missing validation checks...

PT-2022-25027

Name of the Vulnerable Software and Affected Versions Connected Vehicle Systems Alliance COVESA dlt-daemon versions through 2.18.8 Description An issue was discovered due to a faulty DLT file parser, allowing a crafted DLT file to crash the process. This is caused by missing validation checks,...

CVE-2022-39836

An issue was discovered in Connected Vehicle Systems Alliance COVESA dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte...

CVE-2022-39836: Out-of-bounds Read

An issue was discovered in Connected Vehicle Systems Alliance COVESA dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte...

CVE-2022-39837

An issue was discovered in Connected Vehicle Systems Alliance COVESA dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a NULL pointer dereference,...

COVESA 2.18.8 NULL Pointer Dereference / Heap Buffer Over-Read

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Memory Corruption Vulnerabilities product: COVESA DLT daemon Diagnostic Log and Trace Connected Vehicle Systems Alliance COVESA, formerly GENIVI vulnerable...