Open Vehicle Monitoring System 3 Buffer Overflow Vulnerability in GVRET Frame Parsing

A buffer overflow vulnerability has been identified in Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005. The issue arises in the GVRET log format parser, where the length field in GVRET binary data is not properly validated. This lack of validation allows remote attackers to send crafted GVRET frames that can cause a denial of service or potentially execute arbitrary code.

Impact

Exploitation of this vulnerability leads to a stack buffer overflow, which can cause heap corruption and allow for arbitrary code execution.

Reproduction

To reproduce this vulnerability, send a crafted GVRET frame with an oversized length field that exceeds the buffer size in the 'canformat_gvret.cpp' parser. The frame can be delivered over the network or directly on the local CAN bus.