{"affected":[{"product":"vSomeIp","source":"CNA: certcc","vendor":"COVESA","versions":[{"lessThan":"3.7.4","status":"affected","version":"v3.6.1","versionType":"custom"}]}],"cveId":"CVE-2026-91141","cwes":["CWE-1284","CWE-789","CWE-400"],"description":"A vulnerability in the default configuration of vsomeip allows a remote, unauthenticated attacker to trigger massive memory allocations by sending a small TCP packet with a large, attacker-declared SOME/IP length field. This can lead to immediate service termination via OOM-kill on memory-constrained systems or total host memory exhaustion through repeated connections.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1794521969583,"publishedAt":1794518003814,"references":[{"source":"CNA: certcc","tags":[],"url":"https://kb.cert.org/vuls/id/128947"},{"source":"CNA: certcc","tags":[],"url":"https://biackr0se.github.io/posts/cve-2026-91141-vsomeip/"},{"source":"ADP: CVE","tags":[],"url":"https://www.kb.cert.org/vuls/id/128947"},{"source":"cret@cert.org","tags":[],"url":"https://biackr0se.github.io/posts/cve-2026-91141-vsomeip/"},{"source":"cret@cert.org","tags":[],"url":"https://kb.cert.org/vuls/id/128947"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://www.kb.cert.org/vuls/id/128947"}],"remediation":[],"revision":"182b631d4954664880c9c2ffacda2b1ef83fbcc69137cbcf9db15f51487b142f","sources":[{"modifiedAt":1794521419636,"name":"CNA: certcc","retrievedAt":1794522760486,"url":"https://www.cve.org/CVERecord?id=CVE-2026-91141"},{"modifiedAt":1794521969583,"name":"NVD","retrievedAt":1794529646310,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91141"}],"ssvc":null,"status":"published","title":"CVE-2026-91141","updatedAt":1794529646310}