https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-39837.htmlhttps://patchthecve.com/cve/CVE-2022-39837.htmlWed, 17 Jun 2026 04:58:24 +0000MEDIUM 5.5: An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a NULL pointer dereference,https://patchthecve.com/cve/CVE-2022-39836.htmlhttps://patchthecve.com/cve/CVE-2022-39836.htmlWed, 17 Jun 2026 04:58:24 +0000MEDIUM 5.5: An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte.https://patchthecve.com/cve/CVE-2022-31291.htmlhttps://patchthecve.com/cve/CVE-2022-31291.htmlWed, 17 Jun 2026 04:45:16 +0000HIGH 7.5: An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets.https://patchthecve.com/cve/CVE-2021-29507.htmlhttps://patchthecve.com/cve/CVE-2021-29507.htmlWed, 17 Jun 2026 03:47:47 +0000MEDIUM 5.7: GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications which are using the configuration file could fail tohttps://patchthecve.com/cve/CVE-2020-36244.htmlhttps://patchthecve.com/cve/CVE-2020-36244.htmlWed, 17 Jun 2026 03:15:12 +0000CRITICAL 9.8: The daemon in GENIVI diagnostic log and trace (DLT), is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely execute arbitrary code on the DLT-Daemon (versions prior to 2.18.6).https://patchthecve.com/cve/CVE-2020-29394.htmlhttps://patchthecve.com/cve/CVE-2020-29394.htmlWed, 17 Jun 2026 03:11:15 +0000HIGH 7.8: A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) allows arbitrary code execution because fscanf is misused (no limit on the number of characters to be read in the format argument).