Pending AI Enrichment

This vulnerability was recently detected via the live feed and has not yet been processed by Precogs AI's context enrichment engine. The data below represents raw telemetric data.

RAW NVD TELEMETRY

CVE-2026-74238

CVSS Base Score
7.5 HIGH
Primary Weakness
CWE-125
Published Date
Aug 17, 2026
Data Source
NVD API

TIER IV Nebula through 1.2.0 contains an out-of-bounds read vulnerability in the Vlp32Decoder::unpack() function that allows unauthenticated remote attackers to cause the decoder to read past the end of a received UDP buffer into adjacent heap memory by sending a short UDP datagram. Attackers can send a malformed datagram to the Velodyne UDP sensor port, which lacks sender-address restrictions present in other drivers, causing fabricated points derived from heap memory contents to be silently published into downstream PointCloud2 messages consumed by Autoware nodes.

Related Vulnerabilitiesvia CWE-125

Is your system affected?

Precogs AI detects CVE-2026-74238 in compiled binaries, LLMs, and application layers — even without source code access.

Request Deep AnalysisBook a demo