PT-2026-36513 · Unknown · Cannelloni

Sginnora · Published 2026-05-01 · Updated 2026-05-12 · CVE-2026-37539

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions cannelloni version 2.0.0

Description A buffer overflow occurs during CAN frame parsing. This issue exists within the parseCANFrame() function in parser.cpp and the decodeFrame() function in decoder.cpp. Remote attackers can exploit this by sending crafted CAN FD frames to cause a denial of service resulting in a crash, or potentially execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2026-37539

Affected Products

Cannelloni

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-37539 · Security Note
• https://github.com/mguentner/cannelloni · Note
• https://twitter.com/infoflowcloud/status/2050270641383768463 · Twitter Post
• https://twitter.com/lyrie_ai/status/2054126102423965957 · Twitter Post
• https://twitter.com/vuldb/status/2050612317789061292 · Twitter Post
• https://twitter.com/lyrie_ai/status/2054126104231686215 · Twitter Post
• https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381 · Note
• https://t.me/CVEtracker/52438 · Telegram Post
• https://t.me/cveNotify/162254 · Telegram Post
• https://twitter.com/lyrie_ai/status/2054126101576741218 · Twitter Post
• https://twitter.com/CVEnew/status/2050269606946676878 · Twitter Post