← Database

CVE-2022-39837

MEDIUM CVSS: 5.5 Published: 2022-10-25 Modified: 2026-06-17

Description

An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a NULL pointer dereference,

Affected Platforms

Genivi Diagnostic Log And Trace

Weakness Type

CWE-476, CWE-476

References