early signals CERT/CC infra

VU#128947: COVESA vsomeip excessive memory allocation in reliable (TCP) endpoint buffer handling

// AI summary

COVESA vsomeip versions 3.7.3 and below contain a memory allocation vulnerability allowing a remote, unauthenticated peer to exhaust host memory and deny service via TCP endpoint buffer handling.

// from the source

Overview vsomeip, COVESA's open source implementation of the SOME/IP automotive communication middleware, contained a memory allocation vulnerability present in versions 3.7.3 and below. A vsomeip reliable (TCP) SOME/IP endpoint grows its receive buffer to an attacker-declared message size before validating that the declared bytes have actually been received, allowing a remote, unauthenticated peer to exhaust host memory and deny service. The issue was reported publicly as COVESA/vsomeip issue #