An integer underflow vulnerability in the Open-SAE-J1939 library allows unauthenticated adjacent attackers to trigger an out-of-bounds write, potentially leading to denial of service or memory corruption.

This is an integer underflow vulnerability affecting Transport Protocol Data Transfer handling, specifically triggered when an incoming CAN frame sequence number results in an invalid array index calculation. The vulnerability requires adjacent network access and no authentication to exploit.

A successful exploit of this vulnerability can result in memory corruption or system crashes, posing significant availability and integrity risks to embedded systems relying on the library. With a CVSS score of 8.1, the high severity reflects the potential for severe operational disruption in automotive or industrial control environments where reliable Controller Area Network communication is critical.

Immediate Action: Review the affected codebase and apply source code patches to prevent integer underflow during CAN frame index calculations.

Proactive Monitoring: Monitor network segments utilizing SAE-J1939 for anomalous frame traffic or unexpected device reboots.

Compensating Controls: Implement strict network segmentation and boundary defense controls to limit adjacent network exposure to trusted interfaces.

Public Exploit Available: Yes, a public proof-of-concept reference exists via the linked GitHub Gist security advisory.

Organizations utilizing the Open-SAE-J1939 library should prioritize code review and apply input validation checks on all incoming transport protocol data frames. Immediate remediation is essential to prevent potential memory corruption and safeguard critical embedded infrastructure against adjacent network threats.