collin80 Open-SAE-J1939 up to 2023-03-08 integer underflow

Summaryinfo

A vulnerability classified as problematic has been found in collin80 Open-SAE-J1939 up to 2023-03-08. This impacts an unknown function. Performing a manipulation results in integer underflow. This vulnerability is known as CVE-2026-37537. Access to the local network is required for this attack. No exploit is available.

Detailsinfo

A vulnerability classified as problematic has been found in collin80 Open-SAE-J1939 up to 2023-03-08. This affects some unknown processing. The manipulation with an unknown input leads to a integer underflow vulnerability. CWE is classifying the issue as CWE-191. The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result. This is going to have an impact on integrity, and availability. The summary by CVE is:

collin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08) contains an integer underflow leading to out-of-bounds write in Transport Protocol Data Transfer handling. At line 23: uint8_t index = data[0] - 1. When data[0] (sequence number from CAN frame) is 0, index underflows to 255. Subsequent write at tp_dt->data[255*7 + i-1] reaches offset 1791, exceeding the MAX_TP_DT buffer (1785 bytes) by 6 bytes.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2026-37537 since 04/06/2026. The exploitability is told to be easy. Access to the local network is required for this attack to succeed. No form of authentication is needed for exploitation. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 05/01/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-26690). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• collin80

Name

• Open-SAE-J1939

Version

• 2023-03-08

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion