CVE-2026-111282 is an out-of-bounds read vulnerability in iso14229 before version 0.10.1. The vulnerability is caused by an integer wraparound in the Handle_0x38_RequestFileTransfer function, which allows unauthenticated attackers to bypass the file path length check. This can lead to a crash or disclosure of memory. The vulnerability has a high severity score and defenders should prioritize patching or m [truncated]
CVE-2026-54413 is an integer underflow and downstream out-of-bounds read vulnerability in the Handle_0x27_SecurityAccess() function in iso14229.c. This vulnerability allows a remote unauthenticated attacker to crash a UDS server and potentially read memory past the receive buffer by sending a single-byte 0x27 SecurityAccess request that follows any earlier well-formed 0x27 message. The handler reads the S [truncated]
