VDB
CVE-2023-26257
CVE-2023-26257
PUBLISHED
CVSS 7.5 HIGH
An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI) dlt-daemon through 2.18.8. Dynamic memory is not released after it is allocated in dlt-control-common.c.
EPSS 1.21% · 68.1th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
1.21%
68.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| covesa | dlt-daemon | 0, 0 |
| covesa | dlt-daemon | 0, 0 |
| n/a | n/a | n/a, n/a |
Timeline
- Feb 9, 2023 Fix PR Merged
- Feb 27, 2023 CVE Published
- Feb 27, 2023 EPSS Score
- Feb 27, 2023 PoC Published
- Mar 7, 2023 EPSS Score
- Apr 8, 2023 EPSS Score
- May 18, 2023 EPSS Score
- Jun 27, 2023 EPSS Score
- Aug 6, 2023 EPSS Score
- Sep 15, 2023 EPSS Score
- Oct 25, 2023 EPSS Score
- Nov 24, 2023 PoC Published