Stack Buffer Overflow in COVESA Open1722 ACF-CAN Listener

CVE-2026-73522

What is CVE-2026-73522?

The COVESA Open1722 product, up through version 0.9.2, has a stack buffer overflow vulnerability that can be exploited by unauthenticated remote attackers. By sending crafted UDP datagrams that exceed the expected limit of 15 ACF-CAN messages, attackers can overwrite adjacent stack memory. This occurs due to improper bounds checking within the avtp_to_can() function, which fails to limit its write index accordingly. Because the system accepts datagrams from any sender with a hardcoded, unauthenticated stream ID in plaintext, this vulnerability could lead to unauthorized code execution or cause the application to crash.

References