Executive brief
Open Vehicle Monitoring System 3 (OVMS3) is a hardware and software platform used to monitor and control electric vehicles remotely. A security vulnerability exists in how the system processes network traffic log files (PCAP format). An attacker could provide a specially crafted log file that, when processed by the system, causes a crash or allows for unauthorized code execution, potentially compromising the vehicle's monitoring data or system integrity.
Technical details
A stack-based buffer overflow exists in the Open Vehicle Monitoring System 3 (OVMS3) version 3.3.005 within the 'canformat_pcap.cpp' component. The vulnerability is caused by a lack of proper validation for the 'phdr.len' field in the PCAP/pcapng log format parser. When processing a malformed log file, this length field is used in a 'memcpy' operation into a fixed-size stack buffer without an upper-bound check. An attacker can exploit this by providing a crafted PCAP file, leading to a denial of service (system crash) or potential arbitrary code execution. The attack requires user interaction to trigger the parsing of the malicious file.
Affected products
- Open Vehicles Open Vehicle Monitoring System 3 (OVMS3) firmware 3.3.005
Timeline
- 2026-04-30: disclosed: Initial disclosure by Innora Security Research
- 2026-05-01: advisory: CVE published
- 2026-05-06: other: Issue tracked by vendor on GitHub