A stack-based buffer overflow in COVESA Open1722 presents a high-severity risk that could be leveraged by remote attackers to impact system integrity.

This is a stack-based buffer overflow vulnerability, identified as CWE-121, occurring during the processing of AVTP to CAN data. The vulnerability is remotely triggerable by an unauthenticated attacker.

A successful exploit could result in an attacker gaining control over the process flow or causing significant system instability. With a CVSS score of 7.5, this vulnerability represents a high risk to the availability and integrity of systems relying on the Open1722 implementation.

Immediate Action: Maintain vigilance for security patches from the COVESA project and apply updates to the Open1722 implementation immediately.

Proactive Monitoring: Monitor for anomalous spikes in memory usage or unexpected segmentation faults in services utilizing the Open1722 library.

Compensating Controls: Deploy strict packet inspection on the network interface to identify and drop malformed AVTP frames before they reach the vulnerable parser.

Public Exploit Available: Unknown

Due to the severity of stack-based buffer overflows, it is critical that organizations using COVESA Open1722 monitor for vendor-supplied patches. Until a fix is applied, prioritize network-level restrictions to prevent untrusted traffic from reaching the parsing logic.