A vulnerability labeled as critical has been found in socketcand 0.4.2. This impacts the function main of the file socketcand.c. Such manipulation of the argument bus_name leads to buffer overflow.

This vulnerability is documented as CVE-2026-37538. The attack requires being on the local network. There is not any exploit available.