Description (CNA)
An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause a denial-of-service of the infotainment system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Preh Car Connect GmbH (JOYNEXT GmbH) / Volkswagen MIB3 infotainment system MIB3 OI MQB | affected 0 through 0304 |
CWE
CWE-190
References
- https://i.blackhat.com/EU-24/Presentations/EU-24-Parnishchev-OverTheAirVW.pdf
- https://pcacybersecurity.com/resources/advisory/vulnerabilities-in-vw-mib3-infotainment-2
- https://asrg.io/security-advisories/vulnerabilities-in-volkswagen-mib3-infotainment-part-2/
ADP enrichment
No English description supplied.