CVE-2023-34401

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder there is a file, which is encoded with proprietary UD2 codec. Due to missed size checks in the enapsulate file, attacker can achieve Out-of-Bound Read in heap memory...

CVE-2023-34401

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder there is a file, which is encoded with proprietary UD2 codec. Due to missed size checks in the enapsulate file, attacker can achieve Out-of-Bound Read in heap memory...

CVE-2023-34401

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder there is a file, which is encoded with proprietary UD2 codec. Due to missed size checks in the enapsulate file, attacker can achieve Out-of-Bound Read in heap memory...

CVE-2023-34401

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder there is a file, which is encoded with proprietary UD2 codec. Due to missed size checks in the enapsulate file, attacker can achieve Out-of-Bound Read in heap memory...

CVE-2023-34401

The Mercedes-Benz head-unit NTG6 is vulnerable to an Out-of-Bound Read in heap memory due to missing size checks in the enapsulate file during the import or export of profile settings over USB. This issue specifically affects files encoded with the proprietary UD2 codec . Additionally, a related ...

CVE-2023-34401

creationtimestamp| type| source ---|---|--- 2025-01-17 13:35:07+00:00| seen| https://poliverso.org/objects/0477a01e-45ff02b8-52616ac586aa8672 2025-02-13 23:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3sxwqrai2a 2025-02-14 00:35:09+00:00| seen|...