1032 matches found
Android Automotive OS Update Bulletin—May 2023Stay organized with collectionsSave and categorize content based on your preferences.
The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2023-05-05 or later from the May 2023 Android Security Bulletin in addition to all issues in this...
CVE-2023-29086
The CVE-2023-29086 entry targets Samsung Exynos Mobile Processor, Automotive Processor and Modem families (Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, Exynos Auto T5123). The underlying issue is memory corruption caused by insufficient parameter validation during d...
PT-2023-22134 · Samsung · Exynos Modem 5300 +6
Name of the Vulnerable Software and Affected Versions: Exynos Mobile Processor affected versions not specified Exynos Modem 5123 affected versions not specified Exynos Modem 5300 affected versions not specified Exynos 980 affected versions not specified Exynos 1080 affected versions not specified...
PT-2023-22135 · Samsung · Exynos Modem 5300 +5
Name of the Vulnerable Software and Affected Versions: Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123 Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5300 Exynos Mobile Processor, Automotive Processor and Modem for Exynos 980 Exynos Mobile...
Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign
The North Korean threat actor known as the Lazarus Group has been observed shifting its focus and rapidly evolving its tools and tactics as part of a long-running campaign called DeathNote. While the nation-state adversary is known for persistently singling out the cryptocurrency sector, recent...
Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign
The North Korean threat actor known as the Lazarus Group has been observed shifting its focus and rapidly evolving its tools and tactics as part of a long-running campaign called DeathNote. While the nation-state adversary is known for persistently singling out the cryptocurrency sector, recent...
CVE-2022-33282
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...
Integer overflow
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...
CVE-2023-29389
CVE-2023-29389 affects Toyota RAV4 2021 vehicles, where ECUs on the CAN bus trust messages from other ECUs. A physically proximate attacker who accesses the headlight connector can inject forged "Key is validated" messages over CAN, potentially allowing the attacker to drive the vehicle. This has...
CVE-2023-29389
Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged "Key is validated"...
CVE-2022-33282 Integer overflow to buffer overflow in Automotive Multimedia
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...
CVE-2022-33282
CVE-2022-33282 affects Qualcomm Automotive Multimedia (chipset) where an integer overflow during IOCTL calls in video playback causes memory corruption. Root cause: overflow turning into buffer overflow within IOCTL handling. Impact per CVSS is high on confidentiality, integrity, and availability...
CVE-2022-33282 Integer overflow to buffer overflow in Automotive Multimedia
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...
PT-2023-13287 · Unknown · Automotive Multimedia
Name of the Vulnerable Software and Affected Versions: Automotive Multimedia affected versions not specified Description: The issue is related to memory corruption in Automotive Multimedia, caused by an integer overflow leading to a buffer overflow during IOCTL calls in video playback...
Android Automotive OS Update Bulletin—April 2023Stay organized with collectionsSave and categorize content based on your preferences.
The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2023-04-05 or later from the April 2023 Android Security Bulletin in addition to all issues in this...
Smart Mobility has a Blindspot When it Comes to API Security
The emergence of smart mobility services and applications has led to a sharp increase in the use of APIs in the automotive industry. However, this increased reliance on APIs has also made them one of the most common attack vectors. According to Gartner, APIs account for 90% of the web application...
varta-automotive.de Cross Site Scripting vulnerability OBB-3227261
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-40539
Memory corruption in Automotive Android OS due to improper validation of array index...