CVE-2026-73522 COVESA CVE debrief

Who should care

Defenders responsible for systems using COVESA Open1722 should assess exposure and prioritize remediation. This includes reviewing network configurations, monitoring for suspicious activity, and updating vulnerable systems.

Why it matters

CVE-2026-73522 is a high-severity vulnerability in COVESA Open1722 that allows unauthenticated remote attackers to achieve arbitrary code execution or denial of service. Defenders should prioritize remediation and assess exposure in their environments.

• Remote unauthenticated attackers can exploit this vulnerability to achieve arbitrary code execution or denial of service.
• Successful exploitation can lead to system crashes or potential data breaches.
• Defenders should verify affected versions and assess exposure in their environments.
• Remediation priority is high due to the vulnerability's CVSS score of 8.7 and potential for significant impact.

Technical summary

The COVESA Open1722 project through version 0.9.2 contains a stack buffer overflow vulnerability. The vulnerability is triggered by sending a crafted UDP datagram with more than 15 ACF-CAN messages to the avtp_to_can() function, which does not properly bound its write index against the caller-supplied array size. This allows unauthenticated remote attackers to corrupt adjacent stack memory, potentially leading to arbitrary code execution or denial of service.

Defensive priority

High

Recommended defensive actions

• Review and update COVESA Open1722 to a version that fixes the stack buffer overflow vulnerability.
• Implement network filtering to block crafted UDP datagrams containing more than 15 ACF-CAN messages.
• Monitor systems for signs of potential exploitation, such as unusual network activity or system crashes.
• Verify affected versions and assess exposure in your environment.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and NVD vulnerability detail page provide information about the vulnerability, including its description, CVSS score, and affected versions. Additional details are available in source references from Vulncheck.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.