Vendor
Driftregion iso14229 versions before 0.10.1 are vulnerable to an integer wraparound in Handle_0x38_RequestFileTransfer, allowing unauthenticated attackers to trigger an out-of-bounds read.