VU#128947: COVESA vsomeip excessive memory allocation in reliable (TCP) endpoint buffer handling
2026-10-26T20:52:02Z•62e5476b0c5e11934336e5eef921703d31105ddc31b665d7f79ae54cae26bc73
CVE-2026-100156CVE-2026-109618CVE-2026-109619CVE-2026-34073CVE-2026-3547CVE-2026-3833CVE-2026-91141CVE-2026-96679CVE-2026-96681CVE-2026-97406BishengKomodoLowcoderPHPTLSX.509Xerjauthentication-bypassauthorization-bypasscommand-injectioncredential-mintingdata-exfiltrationdenial-of-servicememory-corruptionmultiple-vulnerabilitiesname-constraintsprivilege-escalationremote-code-executionuse-after-freevsomeip
What happened
CERT/CC advisories describe multiple vulnerabilities across vsomeip, PHP, Xerj, TLS/X.509 libraries, Bisheng, Komodo Periphery, and Lowcoder. Impacts include unauthenticated denial of service, remote code execution, authentication and authorization bypass, credential minting, certificate constraint bypass, data exposure, and root-level command execution. Affected versions and remediation vary; upgrades and restrictive configuration are generally recommended.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- certcc_vulnotes
- Record identifier
- 62e5476b0c5e11934336e5eef921703d31105ddc31b665d7f79ae54cae26bc73
- Enrichment time
- 2026-10-26T20:52:02Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.