1345 matches found
CVE-2023-34397
Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed...
CVE-2023-34400
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file, service try to define header inside the file and convert it to null-terminated string. If character is missed, will return null pointer...
CVE-2023-34397
Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed...
PT-2025-6486 · Mercedes Benz · Mercedes-Benz Head-Unit Ntg6
Name of the Vulnerable Software and Affected Versions: Mercedes-Benz head-unit NTG6 affected versions not specified Description: The issue concerns the Mercedes-Benz head-unit NTG6, which has functions to import or export profile settings over USB. When parsing a file, the service attempts to...
CVE-2023-34397
Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed...
CVE-2023-34398
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The boost library contains a vulnerability/null pointer dereference...
CVE-2023-34400
The Mercedes-Benz head-unit NTG6 is vulnerable to a memory corruption issue during the import or export of profile settings via USB . The root cause lies in a file parsing failure where the service attempts to define a header within the file and convert it to a null-terminated string ; if a null ...
CVE-2023-34404
The Mercedes-Benz head-unit NTG6 is vulnerable to a command injection flaw due to the presence of Ethernet pins on the Base Board used to connect the CSB module . An attacker with physical access can connect to these pins to gain access to the internal network. By accessing a specific port, the a...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: net: use a bounce buffer for copying skb-mark syzbot found arm64 builds would crash in sockrecvmark when CONFIGHARDENEDUSERCOPY=y x86 and powerpc are not detecting the issue because they define useraccessbegin. This will be handl...
PT-2025-1391 · Mercedes Benz · Mercedes-Benz Head-Unit Ntg6
Name of the Vulnerable Software and Affected Versions: Mercedes Benz head-unit NTG 6 affected versions not specified Description: The Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing, it is possible to trigger a crash of the service...
Mercedes-Benz Head Unit security research report
Introduction This report covers the research of the Mercedes-Benz Head Unit, which was made by our team. Mercedes-Benz's latest Head Unit infotainment system is called Mercedes-Benz User Experience MBUX. We performed analysis of the first generation MBUX. MBUX was previously analysed by KeenLab...
PT-2025-1207 · Mercedes Benz · Mercedes Benz Ntg +1
Name of the Vulnerable Software and Affected Versions: Mercedes Benz NTG New Telematics Generation versions 6 through 2021 Description: The issue is related to a possible stack buffer overflow in the Service Broker service of the Mercedes-Benz User Experience MBUX system, which can allow an...
PT-2025-1228 · Mercedes Benz · Mercedes-Benz Head-Unit Ntg6
Name of the Vulnerable Software and Affected Versions: Mercedes-Benz head-unit NTG6 affected versions not specified Description: The issue is related to a race condition in the Mercedes-Benz head-unit NTG6, which can be exploited by connecting to the Ethernet pins on the Base Board. This allows a...
PT-2025-1231 · Mercedes Benz · Mercedes-Benz Head-Unit Ntg6
Name of the Vulnerable Software and Affected Versions: Mercedes-Benz head-unit NTG6 affected versions not specified Description: The issue is related to the import or export of profile settings over USB in the Mercedes-Benz head-unit NTG6. Some values are serialized using the boost library, which...
PT-2025-1230 · Mercedes Benz · Mbux +1
Name of the Vulnerable Software and Affected Versions: Mercedes-Benz head-unit NTG6 Description: The issue is related to the Mercedes-Benz head-unit NTG6, which has Ethernet pins on the Base Board to connect the module CSB. An attacker can connect to these pins and gain access to the internal...
PT-2025-1229 · Mercedes Benz · Mbux +1
Name of the Vulnerable Software and Affected Versions: Mercedes-Benz head-unit NTG6 affected versions not specified Description: The issue is related to the import or export of profile settings over USB in the Mercedes-Benz head-unit NTG6. A file within the profile folder is encoded with a...
PT-2024-36995 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition in the ext4 file system's buffer head read fault injection. This occurs because the completion of buffer head read and the buffer head fault...
SUSE CVE-2024-53130
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in blockdirtybuffer tracepoint When using the "block:blockdirtybuffer" tracepoint, markbufferdirty may cause a NULL pointer dereference, or a general protection fault when KASAN is enabled. This happens...
CVE-2024-53130
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in blockdirtybuffer tracepoint When using the "block:blockdirtybuffer" tracepoint, markbufferdirty may cause a NULL pointer dereference, or a general protection fault when KASAN is enabled. This happens...
CVE-2024-53130 nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in blockdirtybuffer tracepoint When using the "block:blockdirtybuffer" tracepoint, markbufferdirty may cause a NULL pointer dereference, or a general protection fault when KASAN is enabled. This happens...