CVE-2022-39836: Genivi Diagnostic Log And Trace

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte.

Affected products

• Genivi Diagnostic Log And Trace: up to and including 2.18.8

Published 2022-10-25. Last modified 2026-06-17.