Open Vehicle Monitoring System 3 Buffer Overflow Vulnerability in CANswitch Log Parsing

A buffer overflow vulnerability has been identified in Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005. The issue arises in the CANswitch log format parser, where the parser fails to properly validate the Data Length Code (DLC) of incoming CANswitch frames. This lack of validation allows remote attackers to send crafted CANswitch frames that can lead to a denial-of-service condition or potentially execute arbitrary code.

Impact

Exploitation of this vulnerability causes a stack buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition.