CVE-2026-37539

9.8 criticalEPSS 0.5%

Critical (9.8). EPSS 0.5% chance of exploitation in the next 30 days.

Buffer overflow vulnerability in cannelloni v2.0.0 in CAN frame parsing in parser.cpp in function parseCANFrame, and decoder.cpp in function decodeFrame allowing remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted CAN FD frames.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-121
Published: 2026-05-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381
https://github.com/mguentner/cannelloni

Check your stack JSON