{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/iso14229--0.10.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:driftregion:iso14229:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.2,"id":"CVE-2026-111282"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["iso14229 (\u003c 0.10.1)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Driftregion"],"content_html":"\u003cp\u003eDriftregion iso14229 versions prior to 0.10.1 contain an integer wraparound vulnerability in the Handle_0x38_RequestFileTransfer function. This flaw arises during the processing of Unified Diagnostic Services (UDS) file transfer requests (SID 0x38). An unauthenticated attacker can exploit this by crafting a request with a filePathAndNameLength value set between 0xFFFC and 0xFFFF. This specific input causes an integer wraparound, which bypasses intended file path length checks and leads to an out-of-bounds memory read. Depending on the memory state, this vulnerability can be leveraged to cause a denial-of-service (crash) or the disclosure of sensitive memory contents. Defenders should focus on identifying malformed UDS SID 0x38 traffic targeting systems utilizing the iso14229 library.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability allows unauthenticated attackers to crash affected services or disclose sensitive memory contents, potentially exposing cryptographic keys or other process-specific information. This is particularly critical for industrial or automotive controllers utilizing the iso14229 library for diagnostic communication.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the Driftregion iso14229 library to version 0.10.1 or later to implement proper bounds checking on the filePathAndNameLength field.\u003c/li\u003e\n\u003cli\u003eImplement input validation on diagnostic gateways or firewalls to drop UDS SID 0x38 requests containing anomalous length parameters.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-15T22:50:04Z","date_published":"2026-10-15T22:50:04Z","id":"https://feed.craftedsignal.io/briefs/2026-10-iso14229-integer-wraparound/","summary":"Driftregion iso14229 versions before 0.10.1 are vulnerable to an integer wraparound in Handle_0x38_RequestFileTransfer, allowing unauthenticated attackers to trigger an out-of-bounds read.","title":"Integer Wraparound Vulnerability in Driftregion iso14229","url":"https://feed.craftedsignal.io/briefs/2026-10-iso14229-integer-wraparound/"}],"language":"en","title":"CraftedSignal Threat Feed - Iso14229 (\u003c 0.10.1)","version":"https://jsonfeed.org/version/1.1"}