{"history":[{"alert":1,"cve":"CVE-2026-91141","id":23591,"kind":"cna","observed_at":1794522003,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2026-11-12T22:10:19.636Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"url\": \"https://www.kb.cert.org/vuls/id/128947\"}], \"title\": \"CVE Program Container\"}], \"cna\": {\"affected\": [{\"product\": \"vSomeIp\", \"vendor\": \"COVESA\", \"versions\": [{\"lessThan\": \"3.7.4\", \"status\": \"affected\", \"version\": \"v3.6.1\", \"versionType\": \"custom\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the default configuration of vsomeip allows a remote, unauthenticated attacker to trigger massive memory allocations by sending a small TCP packet with a large, attacker-declared SOME/IP length field. This can lead to immediate service termination via OOM-kill on memory-constrained systems or total host memory exhaustion through repeated connections.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"CWE-1284\", \"lang\": \"en\"}]}, {\"descriptions\": [{\"description\": \"CWE-789\", \"lang\": \"en\"}]}, {\"descriptions\": [{\"description\": \"CWE-400\", \"lang\": \"en\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-12T21:13:23.814Z\", \"orgId\": \"37e5125f-f79b-445b-8fad-9564f167944b\", \"shortName\": \"certcc\"}, \"references\": [{\"url\": \"https://kb.cert.org/vuls/id/128947\"}, {\"url\": \"https://biackr0se.github.io/posts/cve-2026-91141-vsomeip/\"}], \"source\": {\"discovery\": \"UNKNOWN\"}, \"title\": \"CVE-2026-91141\", \"x_generator\": {\"engine\": \"VINCE 4.0.3\", \"env\": \"prod\", \"origin\": \"https://cveawg.mitre.org/api/cve/CVE-2026-91141\"}}}, \"cveMetadata\": {\"assignerOrgId\": \"37e5125f-f79b-445b-8fad-9564f167944b\", \"assignerShortName\": \"certcc\", \"cveId\": \"CVE-2026-91141\", \"datePublished\": \"2026-11-12T21:13:23.814Z\", \"dateReserved\": \"2026-09-14T20:30:18.834Z\", \"dateUpdated\": \"2026-11-12T22:10:19.636Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"}],"record":{"affected":[{"product":"vSomeIp","vendor":"COVESA","versions":[{"lessThan":"3.7.4","status":"affected","version":"v3.6.1","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2026-11-12T22:10:19.636Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"url":"https://www.kb.cert.org/vuls/id/128947"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"vSomeIp","vendor":"COVESA","versions":[{"lessThan":"3.7.4","status":"affected","version":"v3.6.1","versionType":"custom"}]}],"descriptions":[{"lang":"en","value":"A vulnerability in the default configuration of vsomeip allows a remote, unauthenticated attacker to trigger massive memory allocations by sending a small TCP packet with a large, attacker-declared SOME/IP length field. This can lead to immediate service termination via OOM-kill on memory-constrained systems or total host memory exhaustion through repeated connections."}],"problemTypes":[{"descriptions":[{"description":"CWE-1284","lang":"en"}]},{"descriptions":[{"description":"CWE-789","lang":"en"}]},{"descriptions":[{"description":"CWE-400","lang":"en"}]}],"providerMetadata":{"dateUpdated":"2026-11-12T21:13:23.814Z","orgId":"37e5125f-f79b-445b-8fad-9564f167944b","shortName":"certcc"},"references":[{"url":"https://kb.cert.org/vuls/id/128947"},{"url":"https://biackr0se.github.io/posts/cve-2026-91141-vsomeip/"}],"source":{"discovery":"UNKNOWN"},"title":"CVE-2026-91141","x_generator":{"engine":"VINCE 4.0.3","env":"prod","origin":"https://cveawg.mitre.org/api/cve/CVE-2026-91141"}}},"cveMetadata":{"assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","assignerShortName":"certcc","cveId":"CVE-2026-91141","datePublished":"2026-11-12T21:13:23.814Z","dateReserved":"2026-09-14T20:30:18.834Z","dateUpdated":"2026-11-12T22:10:19.636Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794522003,"cve":"CVE-2026-91141","description":"A vulnerability in the default configuration of vsomeip allows a remote, unauthenticated attacker to trigger massive memory allocations by sending a small TCP packet with a large, attacker-declared SOME/IP length field. This can lead to immediate service termination via OOM-kill on memory-constrained systems or total host memory exhaustion through repeated connections.","epss":null,"epss_checked":0,"first_seen":1793665374,"kev":null,"kev_checked":1794522003,"products":"COVESA vSomeIp","references":["https://kb.cert.org/vuls/id/128947","https://biackr0se.github.io/posts/cve-2026-91141-vsomeip/","https://www.kb.cert.org/vuls/id/128947"],"score":null,"solutions":"","state":"PUBLISHED","title":"CVE-2026-91141","updated_at":1794522003,"workarounds":""},"sources":[{"canonical_url":"https://kb.cert.org/vuls/id/128947","id":168,"publisher":"CERT/CC","title":"VU#128947: COVESA vsomeip excessive memory allocation in reliable (TCP) endpoint buffer handling"}]}