CVE-2026-54413 Details

A vulnerability exists in the driftregion iso14229 library, specifically in versions through 0.9.0, within the Universal Diagnostic Services (UDS) implementation. The issue is an integer underflow combined with a downstream out-of-bounds read in the Handle_0x27_SecurityAccess function. This vulnerability allows a remote, unauthenticated attacker to crash a UDS server and potentially read memory beyond the receive buffer limit. The exploitation involves sending a single-byte 0x27 Security Access request that follows a well-formed 0x27 message. The vulnerable handler operates over CAN bus, OBD-II, ISO-TP, and DoIP transports, and is exposed in the default diagnostic session without prior authentication, affecting automotive ECUs, industrial controllers, and IoT devices that use iso14229 as their UDS server.

Users can update to version 0.9.1 or later, where this vulnerability has been fixed.