Open-sae-j1939 CVEs and Security Vulnerabilities

Vulnerabilities (Open-sae-j1939)

CVE-2026-42467

Denial of Service via Crafted CAN Frame on J1939 Bus

An issue was discovered in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Binary_Data_Transfer_DM16 causing a denial of service via crafted CAN frame on the J1939 bus.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Danielmartensson

Products

Open-sae-j1939

CVE-2026-37534

Integer underflow in Open‑SAE‑J1939 allows arbitrary memory write via crafted CAN frames

Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Transport_Protocol_Data_Transfer,allows attackers to write to arbitrary memory via crafted sequence number from the CAN frame.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed