CVE-2023-34397: Uncontrolled Resource Consumption

Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed...

PT-2025-14297

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in existing endpoint checks in the Linux kernel's usb: atm: cxacru module has been identified by Syzbot. The issue arises from incomplete endpoint testing, which can be resolved b...

CVE-2023-34403

Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to this pins and get access to internal network. A race condition can be acquired and attacker can spoof “UserData” with desirable file path and access it though backup on USB...

CVE-2024-37601

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause t...

CVE-2023-34400: NULL Pointer Dereference

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file, service try to define header inside the file and convert it to null-terminated string. If character is missed, will return null pointer...

CVE-2024-37601

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause t...

CVE-2023-34399

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The version of boost library contains vulnerability integer overflow...

CVE-2023-34400

The Mercedes-Benz head-unit NTG6 is vulnerable to a NULL pointer dereference (CWE-476) during the processing of profile settings. The issue occurs when the system attempts to import or export settings via USB ; specifically, the service fails to correctly parse the file header into a null-termina...

CVE-2023-34398

The Mercedes-Benz head-unit NTG6 (and potentially the MBUX multimedia system ) is vulnerable to a NULL pointer dereference within the Boost library . The flaw occurs during the import or export of profile settings over USB , where specific values in the settings table are serialized using the Boo...

CVE-2024-37601

A heap buffer overflow exists in the user data import/export function of Mercedes Benz NTG 6 head units. The vulnerability is located within the UserData service (specifically affecting the CHBString::const_iterator::incrementSteps() and CHBString::remove() functions) during the decoding of UD2 f...

CVE-2024-37603

A type confusion vulnerability exists in the user data import/export function of Mercedes Benz NTG (New Telematics Generation) 6 head units (also associated with the MBUX multimedia system ). This flaw occurs due to errors in data type mixing when processing user data. An attacker with local acce...

CVE-2023-34397

The Mercedes-Benz head-unit NTG 6 is vulnerable to a service crash during the import or export of profile settings over USB . The root cause lies in the parsing of these settings, specifically within the UserData service (more specifically, the CSystemProfileServiceImpl thriftme service). Researc...

CVE-2023-34402: Out-of-bounds Write

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service will drop during processing. Due to missed checks, attacker can achieve Arbitrary File Write with service speech rights...

CVE-2023-34402

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service will drop during processing. Due to missed checks, attacker can achieve Arbitrary File Write with service speech rights...

CVE-2025-24200

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report...

Apple Confirms ‘Extremely Sophisticated’ Exploit Threatening iOS Security

Apple fixes the USB Restricted Mode flaw in iOS 18.3.1 and iPadOS 18.3.1. Vulnerability exploited in targeted attacks.…...

kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

A vulnerability was found in the Linux kernel's USB Video Class driver. A buffer for video frame data is allocated, which does not account for all of the frame formats contained in a video stream, leading to an out-of-bounds write when a stream includes frames with an undefined format. An attacke...

The vulnerability of the USB Restricted Mode function in iOS and iPadOS operating systems allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the USB Restricted Mode function in iOS and iPadOS operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to gain unauthorized access to devices...

PT-2025-6934

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved by reverting a commit related to the u serial gadget in the USB subsystem. The issue caused crashes on Tegra systems when the port...

Apple iOS and iPadOS Incorrect Authorization Vulnerability

Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device...