VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 28, 2016· Updated Jun 17, 2026

CVE-2016-8596

CVE-2016-8596

Description

Buffer overflow in the csp_can_process_frame in csp_if_can.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet.

Affected products

3
  • Libcsp/Libcsp2 versions
    cpe:2.3:a:libcsp:libcsp:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:libcsp:libcsp:*:*:*:*:*:*:*:*range: <=1.4
    • (no CPE)range: <=1.4
  • GomSpace/libcspllm-fuzzy
    Range: <=1.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.