CANBoat up to 6.22 Global Buffer analyzer/pgn.c searchForPgn off-by-one

Summaryinfo

A vulnerability categorized as critical has been discovered in CANBoat up to 6.22. Affected is the function searchForPgn of the file analyzer/pgn.c of the component Global Buffer Handler. Executing a manipulation can lead to off-by-one. This vulnerability is tracked as CVE-2026-56790. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical was found in CANBoat up to 6.22. This vulnerability affects the function searchForPgn of the file analyzer/pgn.c of the component Global Buffer Handler. The manipulation with an unknown input leads to a off-by-one vulnerability. The CWE definition for the vulnerability is CWE-193. A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in the searchForPgn() function in analyzer/pgn.c that allows remote attackers to crash the application. Attackers can deliver a crafted NMEA-2000 message with an out-of-range PGN value over CAN bus or N2K-over-IP to trigger an out-of-bounds array access and denial of service.

The weakness was disclosed by FuzzingLabs as 644. The advisory is shared for download at github.com. This vulnerability was named CVE-2026-56790 since 06/23/2026. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available.

Upgrading eliminates this vulnerability. Applying the patch a5a22b74b9ac5688019cba62669df08562cebd6f is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Name

• CANBoat

Version

• 6.0
• 6.1
• 6.2
• 6.3
• 6.4
• 6.5
• 6.6
• 6.7
• 6.8
• 6.9
• 6.10
• 6.11
• 6.12
• 6.13
• 6.14
• 6.15
• 6.16
• 6.17
• 6.18
• 6.19
• 6.20
• 6.21
• 6.22

License

• open-source

Website

• Product: https://github.com/canboat/canboat/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion