Back to Database
Status published
Unknown
CVE-2022-39836
An issue was discovered in Connected Vehicle Systems Alliance (COVESA)...
Vulnerability Description
An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-39836
Credits & Attribution
No credits recorded in the NVD database.
References
More from genivi
View All →CVE-2022-39837
An issue was discovered in Connected Vehicle Systems Alliance (COVESA)...
Unknown
0
CVE-2022-31291
An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to...
High
7.5
CVE-2020-36244
The daemon in GENIVI diagnostic log and trace (DLT), is...
Critical
9.8
CVE-2020-29394
A buffer overflow in the dlt_filter_load function in dlt_common.c from...
High
7.8
Affected Vendor
genivi
View all reports →Affected Software
diagnostic log and trace
Vulnerable Versions:
0
Timeline
Official Publish:
October 24th, 2022
Last Modified:
May 7th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.