1023 matches found
CVE-2025-47314 Improper Input Validation in Automotive Software platform based on QNX
Memory corruption while processing data sent by FE driver...
CVE-2025-47314
The CVE-2025-47314 issue affects an Automotive Software platform based on QNX used in Qualcomm chipsets. The root cause reported is memory corruption encountered when processing data sent by the FE driver. The vulnerability is described with a CVSSv3.1 base score of 7.8 (HIGH) and an attack vecto...
CVE-2025-27077 Use After Free in Automotive Software platform based on QNX
Memory corruption while processing message in guest VM...
CVE-2025-27077
CVE-2025-27077 pertains to memory corruption in Qualcomm chipsets when processing messages in a guest VM. The vulnerability affects the guest/VMM interaction, with the underlying cause described as memory corruption during message handling inside the VM. CVSS 3.1 vector indicates Local attack vec...
CVE-2025-27077 Use After Free in Automotive Software platform based on QNX
Memory corruption while processing message in guest VM...
STAF: Leveraging LLMs for Automated Attack Tree-Based Security Test Generation
In modern automotive development, security testing is critical for safeguarding systems against increasingly advanced threats. Attack trees are widely used to systematically represent potential attack vectors, but generating comprehensive test cases from these trees remains a labor-intensive,...
Security Vulnerabilities in Software Supply Chain for Autonomous Vehicles
The interest in autonomous vehicles AVs for critical missions, including transportation, rescue, surveillance, reconnaissance, and mapping, is growing rapidly due to their significant safety and mobility benefits. AVs consist of complex software systems that leverage artificial intelligence AI,...
Android Automotive OS Update Bulletin—September 2025Stay organized with collectionsSave and categorize content based on your preferences.
The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2025-09-05 or later from the September 2025 Android Security Bulletin in addition to all issues in...
CVE-2025-27072
CVE-2025-27072 describes an information-disclosure issue in Qualcomm chipsets during EAVB BE side packet processing with an invalid header length. Connected sources reiterate: vulnerable component is in the EAVB BE processing path; root cause relates to handling of header lengths leading to leaka...
CVE-2025-27072 Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks
Information disclosure while processing a packet at EAVB BE side with invalid header length...
CVE-2025-27072 Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks
Information disclosure while processing a packet at EAVB BE side with invalid header length...
CVE-2025-27062
CVE-2025-27062 involves memory corruption when handling client exceptions that can grant unauthorized channel access. Documents reference affected platforms as Qualcomm chipsets / automotive multimedia, with a root cause described as memory corruption in client-side exception handling. CVSS 3.1 d...
CVE-2025-27062 Improper Access Control in Automotive Multimedia
Memory corruption while handling client exceptions, allowing unauthorized channel access...
CVE-2025-27062 Improper Access Control in Automotive Multimedia
Memory corruption while handling client exceptions, allowing unauthorized channel access...
CVE-2025-21457 Buffer Over-read in Automotive OS Platform Android
Information disclosure while opening a fastrpc session when domain is not sanitized...
CVE-2025-21457
CVE-2025-21457 relates to an information disclosure in Qualcomm-chipset environments involving opening a fastrpc session when the domain is not sanitized. The vulnerability is described as a local impact with a CVSSv3.1 base score of 6.1 (Medium), with Confidentiality Impact: High, Integrity/Avai...
Android Automotive OS Update Bulletin—August 2025Stay organized with collectionsSave and categorize content based on your preferences.
The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2025-08-05 or later from the August 2025 Android Security Bulletin in addition to all issues in this...
A Survey on Privacy-Preserving Computing in the Automotive Domain
As vehicles become increasingly connected and autonomous, they accumulate and manage various personal data, thereby presenting a key challenge in preserving privacy during data sharing and processing. This survey reviews applications of Secure Multi-Party Computation MPC and Homomorphic Encryptio...
AUTOPSY: a Framework for Tackling Privacy Challenges in the Automotive Industry
With the General Data Protection Regulation GDPR in place, all domains have to ensure compliance with privacy legislation. However, compliance does not necessarily result in a privacy-friendly system as for example getting users' consent to process their data does not improve the...
