1028 matches found
CVE-2022-48363
In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Eventually there is an assertion failure in libmpdclient because libqtappfw passes in a NULL pointer...
CVE-2022-48363
CVE-2022-48363 affects MPD prior to 0.23.8, used on Automotive Grade Linux and other platforms. The PipeWire output plugin mishandles a Drain call in certain truncated-file scenarios, leading to an assertion failure in libmpdclient when libqtappfw passes a NULL pointer. Impact is an availability/...
The vulnerability of microprogramming software in embedded Qualcomm chips arises from improper input validation in automotive systems, allowing attackers to execute arbitrary code.
The vulnerability of microprogramming software in embedded Qualcomm chips exists due to improper input validation in automotive systems. Exploiting this vulnerability can allow attackers to execute arbitrary code...
Google Android Automotive OS 安全漏洞
Google Android Automotive OS is an operating system and platform from Google Inc. that runs directly on in-vehicle hardware. Android Automotive OS AAOS suffers from a security vulnerability that stems from a privilege bypass in AndroidManifest.xml, which could potentially grant signing privileges...
CVE-2022-33216
Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file...
Input validation
Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file...
CVE-2022-33216
CVE-2022-33216 describes a transient denial-of-service in automotive systems caused by improper input validation when parsing ELF files. Connected sources identify Qualcomm automotive/chip contexts and REs indicate a local attacker could trigger the DoS by crafting ELF input, though specific affe...
CVE-2022-33216 Improper Input Validation in Automotive
Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file...
PT-2023-13240 · Qualcomm · Snapdragon +14
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a transient denial-of-service in automotive systems, caused by improper input validation while parsing ELF files. There is no...
Android Security Bulletin—February 2023Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2023-02-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
Android Automotive OS Update Bulletin—February 2023Stay organized with collectionsSave and categorize content based on your preferences.
The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2023-02-05 or later from the February 2023 Android Security Bulletin in addition to all issues in th...
varta-automotive.dk Cross Site Scripting vulnerability OBB-3167741
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Automotive Industry Exposed to Have Major API Vulnerabilities
By Habiba Rashid The impacted automotive giants include BMW, Toyota, Ford, Honda, Mercedes-Benz and many more. This is a post from HackRead.com Read the original post: Automotive Industry Exposed to Have Major API Vulnerabilities...
Millions of Vehicles at Risk: API Vulnerabilities Uncovered in 16 Major Car Brands
Multiple bugs affecting millions of vehicles from 16 different manufacturers could be abused to unlock, start, and track cars, plus impact the privacy of car owners. The security vulnerabilities were found in the automotive APIs powering Acura, BMW, Ferrari, Ford, Genesis, Honda, Hyundai, Infinit...
Millions of Vehicles at Risk: API Vulnerabilities Uncovered in 16 Major Car Brands
Multiple bugs affecting millions of vehicles from 16 different manufacturers could be abused to unlock, start, and track cars, plus impact the privacy of car owners. The security vulnerabilities were found in the automotive APIs powering Acura, BMW, Ferrari, Ford, Genesis, Honda, Hyundai, Infinit...
CVE-2022-33300
Memory corruption in Automotive Android OS due to improper input validation...
CVE-2022-33218
Memory corruption in Automotive due to improper input validation...
CVE-2022-33219
Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer...