Skip to main content

Blog post · October 26, 2026 · kb.cert.org

VU#128947: COVESA vsomeip 3.7.4 fixes memory allocation flaw in TCP endpoints

What this article record gives an agent

The original is on kb.cert.org. This record adds what an agent needs to use it: a short summary it can quote, the companies resolved to their records, and a clear line back to the source.

A summary it can quote

Our short summary, marked as ours, separate from the publisher's own words and byline.

Companies, resolved

Who the article is about and who it names, each linked to a company record, not just a name in text.

The source, kept

The original URL, publisher and date, and what kind of piece it is (press release, news, analysis).

Get this article

The same record, three ways in. No key needed to try it.

MCP

curl -X POST https://mcp.decisioninsights.ai/api/mcp-public \
  -H "content-type: application/json" \
  -H "accept: application/json, text/event-stream" \
  -d '{"id":1,"jsonrpc":"2.0","method":"tools/call","params":{"arguments":{"uuid":"196fd03e-1cd7-4673-9984-e64d8e0395b8"},"name":"di_get_content"}}'

REST

GET https://api.decisioninsights.ai/api/public/v1/content/196fd03e-1cd7-4673-9984-e64d8e0395b8

How an agent can check this article before citing it

The check What the record shows Where it is in the data
There is an original kb.cert.org, October 26, 2026 isBasedOn
The companies are real VU, a record of its own about, mentions
Whose words are whose Summary by Decision Insights; the original keeps its own byline author, publisher
View the raw record (JSON-LD)
[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "legalName": "Wiretap Labs, LLC",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/vu128947-covesa-vsomeip-3.7.4-fixes-memory-allocation-flaw-in-tcp-endpoints/",
        "name": "VU#128947: COVESA vsomeip 3.7.4 fixes memory allocation flaw in TCP endpoints",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/vu128947-covesa-vsomeip-3.7.4-fixes-memory-allocation-flaw-in-tcp-endpoints/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/vu/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/vu/",
      "name": "VU"
    },
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Seniority",
        "audienceType": "Staff"
      },
      {
        "@type": "Audience",
        "additionalType": "Job function",
        "audienceType": "Cybersecurity / Security Analyst"
      },
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Practitioner"
      },
      {
        "@type": "Audience",
        "additionalType": "Buyer role",
        "audienceType": "Technical Implementer / Administrator"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Technology maturity",
        "audienceType": "Established Technology"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Consumer Discretionary / Automobiles & Components / Automotive"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
      "@type": "Person",
      "name": "Decision Insights Threat Desk",
      "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
    },
    "dateModified": "2026-10-26T15:50:43-06:00",
    "datePublished": "2026-10-26T15:50:32-06:00",
    "description": "COVESA vsomeip versions 3.7.3 and earlier contain a reliable TCP endpoint flaw enabling remote memory exhaustion, fixed in version 3.7.4 released July 6, 2026.",
    "headline": "VU#128947: COVESA vsomeip 3.7.4 fixes memory allocation flaw in TCP endpoints",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "Alexander Curtis"
      },
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      "url": "https://kb.cert.org/vuls/id/128947"
    },
    "keywords": [
      "Denial of Service"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/vu128947-covesa-vsomeip-3.7.4-fixes-memory-allocation-flaw-in-tcp-endpoints/",
      "@type": "WebPage",
      "sdDatePublished": "2026-10-26",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/vu/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/vu/",
        "name": "VU"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
    "name": "Decision Insights Threat Desk",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  }
]