CVE-2025-32058

The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication. RH850 is connected to infotainment over the INC interface through a custom protocol. There is a vulnerability during processing requests of this protocol on the V850 side which allows an attacker with code...

CVE-2025-32058

The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication. RH850 is connected to infotainment over the INC interface through a custom protocol. There is a vulnerability during processing requests of this protocol on the V850 side which allows an attacker with code...

CVE-2025-32058 Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECU

The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication. RH850 is connected to infotainment over the INC interface through a custom protocol. There is a vulnerability during processing requests of this protocol on the V850 side which allows an attacker with code...

EUVD-2022-30830

Malicious code in bioql PyPI...

CVE-2023-28907

CVE-2023-28907 describes a lack of memory isolation between CPU cores in the VW MIB3 infotainment, enabling an attacker with access to the main OS to compromise the core handling CAN message processing. The issue was first reported in Skoda Superb III with OEM part 3V0035820; a list of affected M...

CVE-2022-26269

Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages...

CVE-2022-26269

Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages...

Code injection

Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages...

CVE-2022-26269

CVE-2022-26269 affects Suzuki Connect v1.0.15. The vulnerability enables an attacker to tamper with messages displayed by the system through spoofed CAN messages, compromising integrity of user-visible information. The available sources consistently describe the issue as a message-tampering vulne...

CVE-2022-26269

Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages...

Design/Logic Flaw

This vulnerability allows adjacent attackers to inject arbitrary Controller Area Network messages on vulnerable installations of Volkswagen Customer-Link App 1.30 and HTC Customer-Link Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...