CVE-2022-33307

CVE-2022-33307 describes a memory corruption vulnerability caused by a double-free in automotive software when a bad HLOS address is passed while mapping one of the lists. The issue is rooted in improper memory handling inside the affected automotive component (lists to be mapped) and is supporte...

PT-2023-18295 · Unknown · Automotive Gpu

Name of the Vulnerable Software and Affected Versions: Automotive GPU affected versions not specified Description: The issue is related to memory corruption in the Automotive GPU when querying a gsl memory node. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-13310 · Qualcomm · Snapdragon +98

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a memory corruption problem caused by a double free error in automotive systems. This occurs when an invalid HLOS address for one of the lists to be mapped i...

Android Automotive OS Update Bulletin—June 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2023-06-05 or later from the June 2023 Android Security Bulletin in addition to all issues in this...

CVE-2022-25713

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key...

Design/Logic Flaw

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key...

CVE-2022-25713 Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key...

CVE-2022-25713

CVE-2022-25713 describes a memory corruption issue in Automotive modules caused by improper restriction of operations within the bounds of a memory buffer while exporting a shared key. The vulnerability affects Qualcomm/Automotive components and is characterized by a local attack surface with low...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption in the Automotive module...

PT-2023-12797 · Unknown · Automotive

Name of the Vulnerable Software and Affected Versions: Automotive affected versions not specified Description: The issue is related to memory corruption in Automotive due to improper restriction of operations within the bounds of a memory buffer. This occurs while exporting a shared key...

Android Automotive OS Update Bulletin—May 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2023-05-05 or later from the May 2023 Android Security Bulletin in addition to all issues in this...

CVE-2023-29086

The CVE-2023-29086 entry targets Samsung Exynos Mobile Processor, Automotive Processor and Modem families (Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, Exynos Auto T5123). The underlying issue is memory corruption caused by insufficient parameter validation during d...

PT-2023-22134 · Samsung · Exynos Modem 5300 +6

Name of the Vulnerable Software and Affected Versions: Exynos Mobile Processor affected versions not specified Exynos Modem 5123 affected versions not specified Exynos Modem 5300 affected versions not specified Exynos 980 affected versions not specified Exynos 1080 affected versions not specified...

PT-2023-22135 · Samsung · Exynos Modem 5300 +5

Name of the Vulnerable Software and Affected Versions: Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123 Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5300 Exynos Mobile Processor, Automotive Processor and Modem for Exynos 980 Exynos Mobile...

Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign

The North Korean threat actor known as the Lazarus Group has been observed shifting its focus and rapidly evolving its tools and tactics as part of a long-running campaign called DeathNote. While the nation-state adversary is known for persistently singling out the cryptocurrency sector, recent...

Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign

The North Korean threat actor known as the Lazarus Group has been observed shifting its focus and rapidly evolving its tools and tactics as part of a long-running campaign called DeathNote. While the nation-state adversary is known for persistently singling out the cryptocurrency sector, recent...

CVE-2022-33282

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...

Integer overflow

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...

CVE-2023-29389

Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged "Key is validated"...

CVE-2023-29389

CVE-2023-29389 affects Toyota RAV4 2021 vehicles, where ECUs on the CAN bus trust messages from other ECUs. A physically proximate attacker who accesses the headlight connector can inject forged "Key is validated" messages over CAN, potentially allowing the attacker to drive the vehicle. This has...