# CVE-2026-37541: Open Vehicles OVMS3 stack overflow in GVRET log parser

Source: https://junglewise.ai/threats/cve-2026-37541-open-vehicles-ovms3-stack-overflow-in-gvret-log-parser  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-01. Updated: 2026-05-20  
License: CC BY 4.0 with a link back

CVE-2026-37541 · Severity: critical · CVSS 10 · Published 2026-05-01

The Open Vehicle Monitoring System (OVMS3) is a hardware and software platform used to remotely monitor and control electric vehicles. A security flaw in how the system processes vehicle data logs allows an attacker to send specially crafted data that can crash the device or potentially allow them to take control of it. This could lead to a loss of vehicle monitoring capabilities or unauthorized access to vehicle data.

Technologies: [Openvehicles Open Vehicle Monitoring System](https://junglewise.ai/threats/technologies/open-vehicle-monitoring-system), [Openvehicles Open Vehicle Monitoring System Firmware](https://junglewise.ai/threats/technologies/open-vehicle-monitoring-system-firmware). Vendors: [Openvehicles](https://junglewise.ai/threats/vendors/openvehicles).

## Quick answers

**Is CVE-2026-37541 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-37541 being exploited in the wild.

**How severe is CVE-2026-37541?** Critical severity, with a CVSS score of 10, published 1 May 2026.

**Which products and versions are affected?** Open Vehicles Open Vehicle Monitoring System 3 3.3.005.

**Is there a fix for CVE-2026-37541?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-37541 attacked?** It is attacked over the network, in device firmware.

**Am I affected by CVE-2026-37541?** Check whether you run Open Vehicles Open Vehicle Monitoring System 3, Openvehicles Open Vehicle Monitoring System or Openvehicles Open Vehicle Monitoring System Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow exists in the GVRET log format parser within 'canformat_gvret.cpp' of OVMS3 version 3.3.005. The vulnerability is caused by a lack of validation on the length field within GVRET binary data frames before it is used as a size argument in a 'memcpy' operation into a fixed-size stack buffer. An attacker can exploit this by providing a malformed GVRET frame, potentially leading to remote code execution (RCE) or a denial of service (DoS). While the CVSS score is high, the attack requires the system to process a malicious log file or frame, which may be delivered over the network depending on the device configuration.

## Affected products

- Open Vehicles Open Vehicle Monitoring System 3 (OVMS3) 3.3.005

## Timeline

- 2026-04-30: disclosed: Initial disclosure by Innora Security Research
- 2026-05-01: advisory: CVE published in NVD
- 2026-05-06: other: Issue tracked by maintainers in GitHub repository

## References

- [https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381](https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381)
- [https://github.com/openvehicles/Open-Vehicle-Monitoring-System-3](https://github.com/openvehicles/Open-Vehicle-Monitoring-System-3)
- [https://github.com/openvehicles/Open-Vehicle-Monitoring-System-3/issues/1393](https://github.com/openvehicles/Open-Vehicle-Monitoring-System-3/issues/1393)

## Related threats

- [Open Vehicles OVMS3 stack overflow in CANswitch parser](https://junglewise.ai/threats/cve-2026-42469-open-vehicles-ovms3-stack-overflow-in-canswitch-parser)
- [Open Vehicles OVMS3 stack overflow in PCAP log parser](https://junglewise.ai/threats/cve-2026-42468-open-vehicles-ovms3-stack-overflow-in-pcap-log-parser)