CVE-2023-28909

A specific flaw exists within the Bluetooth stack of the MIB3 unit. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow when receiving fragmented HCI packets on a channel. An attacker can leverage this vulnerability to bypass the MTU...

CVE-2023-28909

creationtimestamp| type| source ---|---|--- 2025-06-28 15:55:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19818 2025-06-28 18:17:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsorb4rhrn2k...

CVE-2023-28909

CVE-2023-28909 describes a vulnerability in the Bluetooth stack of the Volkswagen MIB3 infotainment unit. The flaw arises from insufficient validation of user-supplied data, causing an integer overflow when receiving fragmented HCI packets on a channel. An attacker can bypass the MTU check on a f...