109 matches found
EUVD-2023-32532
Malicious code in bioql PyPI...
EUVD-2023-32531
Malicious code in bioql PyPI...
EUVD-2023-32527
Malicious code in bioql PyPI...
EUVD-2023-32526
Malicious code in bioql PyPI...
EUVD-2023-32530
Malicious code in bioql PyPI...
EUVD-2023-32525
Malicious code in bioql PyPI...
EUVD-2023-32518
Malicious code in bioql PyPI...
EUVD-2023-32515
Malicious code in bioql PyPI...
EUVD-2023-32524
Malicious code in bioql PyPI...
EUVD-2023-32528
Malicious code in bioql PyPI...
EUVD-2023-32523
Malicious code in bioql PyPI...
EUVD-2023-32716
Malicious code in bioql PyPI...
EUVD-2023-32522
Malicious code in bioql PyPI...
EUVD-2023-32529
Malicious code in bioql PyPI...
CVE-2023-29113
The MIB3 infotainment unit used in Skoda and Volkswagen vehicles does not incorporate any privilege separation for the proprietary inter-process communication mechanism, leaving attackers with presence in the system an ability to undermine access control restrictions implemented at the operating...
CVE-2023-28903
An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause a denial-of-service of the infotainment system...
CVE-2023-28912
The MIB3 unit stores the synchronized phone contact book in clear-text, allowing an attacker with either code execution privilege on the system or physical access to the system to obtain vehicle owner's contact data. The vulnerability was originally discovered in Skoda Superb III car with MIB3...
CVE-2023-28909
A specific flaw exists within the Bluetooth stack of the MIB3 unit. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow when receiving fragmented HCI packets on a channel. An attacker can leverage this vulnerability to bypass the MTU...
CVE-2023-28904
A logic flaw leading to a RAM buffer overflow in the bootloader component of the MIB3 infotainment unit allows an attacker with physical access to the MIB3 ECU to bypass firmware signature verification and run arbitrary code in the infotainment system at boot process...
CVE-2023-28906
A command injection in the networking service of the MIB3 infotainment allows an attacker already presenting in the system to escalate privileges and obtain administrative access to the system. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM par...