Memory Exhaustion Vulnerability in vsomeip Affects Multiple Vendors

CVE-2026-91141

What is CVE-2026-91141?

A vulnerability in the default configuration of vsomeip enables unauthenticated remote attackers to exploit service interruptions. By sending a small TCP packet with an exaggerated SOME/IP length field, attackers can provoke excessive memory allocations. This attack results in service disruptions through immediate process termination via Out Of Memory (OOM) conditions in systems with limited memory or leads to complete memory exhaustion on affected hosts due to repeated connection attempts.

References