CVE-2024-53009

Memory corruption while operating the mailbox in Automotive...

CVE-2025-21422 Cryptographic Issues in Automotive

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses...

CVE-2025-21422 Cryptographic Issues in Automotive

Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses...

CVE-2024-53009

CVE-2024-53009 is a memory corruption vulnerability in Automotive Autonomy related to the mailbox handling. The CVE list describes the root cause as improper validation of an array index, while multiple feeds reiterate a memory corruption issue during mailbox operations in Automotive. Public sour...

CVE-2024-53009 Improper Validation of Array Index in Automotive Autonomy

Memory corruption while operating the mailbox in Automotive...

CVE-2024-53009 Improper Validation of Array Index in Automotive Autonomy

Memory corruption while operating the mailbox in Automotive...

HEMA: a Hands-On Exploration Platform for MEMS Sensor Attacks

Automotive safety and security are paramount in the rapidly advancing landscape of vehicular technology. Building safe and secure vehicles demands a profound understanding of automotive systems, particularly in safety and security. Traditional learning approaches, such as reading materials or...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when manipulating mailboxes in Automotive...

PT-2025-28429 · Qualcomm · Snapdragon +165

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption occurs while operating the mailbox in Automotive. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

Android Automotive OS Update Bulletin—July 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2025-07-05 or later from the July 2025 Android Security Bulletin in addition to all issues in this...

CVE-2023-28907 A lack of access restrictions on internal memory regions

There is no memory isolation between CPU cores of the MIB3 infotainment. This fact allows an attacker with access to the main operating system to compromise the CPU core responsible for CAN message processing. The vulnerability was originally discovered in Skoda Superb III car with MIB3...

CVE-2023-29113 A lack of access control in custom IPC mechanism

The MIB3 infotainment unit used in Skoda and Volkswagen vehicles does not incorporate any privilege separation for the proprietary inter-process communication mechanism, leaving attackers with presence in the system an ability to undermine access control restrictions implemented at the operating...

KIA Aftermarket Generic Smart Keyless Entry System 安全漏洞

KIA Aftermarket Generic Smart Keyless Entry System is an automotive smart door locking system from KIA, a South Korean company. A security vulnerability exists in the KIA Aftermarket Generic Smart Keyless Entry System that stems from the use of fixed learning code, which could lead to replay...

Assessing the Resilience of Automotive Intrusion Detection Systems to Adversarial Manipulation

The security of modern vehicles has become increasingly important, with the controller area network CAN bus serving as a critical communication backbone for various Electronic Control Units ECUs. The absence of robust security measures in CAN, coupled with the increasing connectivity of vehicles,...

Smart Cars, Dumb Passwords: Auto Industry Still Runs on Weak Passwords

A new study by NordPass and NordStellar reveals the automotive industry is plagued by weak, reused, and common…...

Android Automotive OS Update Bulletin—June 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2025-06-05 or later from the June 2025 Android Security Bulletin in addition to all issues in this...

Android Security Bulletin—June 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2025-06-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

CVE-2023-22382

Weak configuration in Automotive while VM is processing a listener request from TEE...

CVE-2023-33037

Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data...

CVE-2023-28901

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing remote attackers to obtain recent trip data, vehicle mileage, fuel consumption, average and maximum speed, and other information of Skoda Connect service users by specifying an arbitrary vehicle VIN number...