CVE Intelligence

Canboat vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Canboat products: 1 record(s), with severity, exploitation and fixes.

Canboat 1

Exploited only (KEV) →

CVE-2026-56790 High · 7.3 CWE-193 Jun 25, 2026
CANBoat - Off-by-One Global Buffer Overflow in searchForPgn()
CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in the searchForPgn() function in analyzer/pgn.c that allows remote attackers to crash the application. Attackers can deliver a crafted NMEA-2000 message with an out-of-range PGN value over CAN bus or N2K-over-IP to trigger an out-of-bounds array access and denial of service.