CVE-2016-8596: Libcsp

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Buffer overflow in the csp_can_process_frame in csp_if_can.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet.

Affected products

• Libcsp Libcsp: up to and including 1.4

Published 2016-10-28. Last modified 2026-06-17.