CVE-2026-111282 Details
Description
Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticated attackers bypass the file path length check. Attackers can send a short RequestFileTransfer (SID 0x38) request with filePathAndNameLength 0xFFFC-0xFFFF, causing callbacks to read past the receive buffer, crashing targets or disclosing memory.
A vulnerability in Driftregion iso14229 versions prior to 0.10.1 allows unauthenticated attackers to exploit an integer wraparound in the Handle_0x38_RequestFileTransfer function. This wraparound lets attackers bypass the file path length validation, causing callbacks to read beyond the allocated buffer. The exploitation can result in crashes or unintended memory disclosure.
Users can upgrade to Driftregion iso14229 version 0.10.1 or later to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 15, 2026CISA-ADP
Assessed Oct 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/driftregion/iso14229/security/advisories/GHSA-5hgv-5fqg-8vcr | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/driftregion/iso14229 | [email protected] | ProductVendor |
| https://github.com/driftregion/iso14229/blob/0.10.0/src/server.c#L1151-L1161 | [email protected] | Source CodeVendor |
| https://github.com/driftregion/iso14229/commit/2e36afcd7f0cd02b0c70446c1a265a7b1999d478 | [email protected] | Source CodeVendor |
| https://github.com/driftregion/iso14229/releases/tag/0.10.1%2B9e7c47e8 | [email protected] | Release NotesVendor |
| https://github.com/driftregion/iso14229/security/advisories/GHSA-5hgv-5fqg-8vcr | [email protected] | AdvisoryExploitRemedyVendor |
| https://github.com/driftregion/iso14229/security/advisories/GHSA-ph4f-7v39-8hgm | [email protected] | AdvisoryExploitRemedyVendor |
| https://www.vulncheck.com/advisories/iso14229-before-0.10.1-out-of-bounds-read-via-handle-0x38-requestfiletransfer | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-190 | Integer Overflow or Wraparound | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Driftregion iso14229 | <= 0.9.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 16, 2026 | CVE Modified | CISA-ADP |
| Oct 15, 2026 | New CVE Received | [email protected] |