Buffer overflow in the cspcanprocessframe in cspif_can.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet.