CVE-2025-2082

CVE-2025-2082 overview (Tesla Model 3 VCSEC): A vulnerability in the VCSEC module where an attacker can trigger an integer overflow by manipulating the TPMS certificate response, allowing remote code execution in the VCSEC context with network-adjacent access. Authentication is not required and t...

CVE-2022-42431

CVE-2022-42431 affects Tesla vehicles via the bcmdhd driver. The issue arises from insufficient validation of the length of user-supplied data before copying to a buffer, enabling a local attacker to escalate privileges and execute code with root privileges. The connected document set confirms th...

CVE-2022-42430

CVE-2022-42430 affects Tesla vehicles via a vulnerability in the handling of the wowlan_config data structure. The root cause is described as a lack of validating the existence of an object before performing operations, effectively a use-after-free condition that can be exploited to escalate priv...

CVE-2022-3093

The CVE-2022-3093 issue is a Tesla ice_updater firmware-update vulnerability where improper validation of user-supplied firmware allows a physical attacker to execute arbitrary code with root privileges. Multiple sources (ZDI advisory ZDI-22-1188 and Red Hat/CVEs) describe a TOCTOU‑style control ...