Connected Vehicle Systems Alliance (COVESA) up to v2.18.8 was discovered to contain a buffer overflow via the component /shared/dlt_common.c.
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')