CVE-2026-73522: Covesa OPEN1722

High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days.

COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing more than 15 ACF-CAN messages. The avtp_to_can() function increments its write index without bounding it against the caller-supplied array size, and because the listener accepts datagrams from any sender matching a hardcoded unauthenticated stream ID transmitted in plaintext, attackers can corrupt adjacent stack memory to achieve arbitrary code execution or denial of service.

Affected products

• Covesa OPEN1722: up to and including 0.9.2

Published 2026-08-17. Last modified 2026-09-24.