Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
Qualcomm Snapdragon chipsets are affected by an after-free memory corruption issue in the DSP Service, caused by improper handling of user input buffers when executing system service routines. An attacker could exploit this to corrupt memory, though the advisory does not state a severity rating. This could be relevant where Qualcomm Snapdragon components are deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
A use-after-free memory corruption issue exists in Qualcomm's DSP Service, triggered when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations. An attacker could potentially exploit this memory corruption, though the advisory does not state a specific severity rating. This could be relevant where Qualcomm Snapdragon components are deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
Qualcomm Snapdragon graphics components contain a memory corruption vulnerability triggered when processing draw objects of an incorrect type during graphics command list execution. An attacker could exploit this untrusted pointer dereference to corrupt memory, though the advisory does not state a severity rating. This could be relevant where Snapdragon graphics components are deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
A use-after-free memory corruption issue exists in the DSP Service component of certain Qualcomm Snapdragon chipsets, which an attacker could exploit by accessing and modifying geographic mapping data concurrently without proper synchronization. This could be relevant where Qualcomm Snapdragon chipsets are deployed in automotive systems, since such chipsets are commonly used in in-vehicle infotainment and telematics platforms. Confirm applicability through the product SBOM or dependency inventory.
Qualcomm Snapdragon graphics components contain an after-free memory corruption issue that can occur when concurrent operations act on shared memory page lists without proper synchronization. An attacker who can trigger those concurrent operations could corrupt memory, though the advisory does not state a severity rating or confirm exploitation. This could be relevant where Qualcomm Snapdragon graphics components are deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
Qualcomm Snapdragon chips include a missing authorization flaw in Core where memory corruption can occur when a non-secure loader rewrites page tables before secure memory initialization. An attacker could potentially exploit this to corrupt memory, though the advisory does not state a severity rating. This could be relevant where Qualcomm Snapdragon components are deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
A flaw in the privileged Bluetooth process of Google Android involves an uninitialized pointer dereference that could allow a local attacker to hijack control flow and escalate privileges without any user interaction. This could be relevant where Android-based components are deployed in automotive systems, such as in-vehicle infotainment or telematics units. Confirm applicability through the product SBOM or dependency inventory.
The advisory describes a flaw in Zephyr's I3C system-call handler where unvalidated per-target buffer pointers let an unprivileged user-mode thread read or write arbitrary kernel memory, causing an out-of-bounds kernel write and kernel memory disclosure that escalate to supervisor privilege. This could be relevant where Zephyr's I3C subsystem is deployed in automotive systems, since the defect only exists in CONFIG_USERSPACE builds and requires access to an I3C controller device object. Confirm applicability through the product SBOM or dependency inventory.
A missing bounds check in the NFC HAL component phNxpNciHal_ext.cc could allow a local attacker to trigger an out-of-bounds write, leading to local escalation of privilege without needing user interaction or extra execution privileges. This could be relevant where Android NFC HAL components are deployed in automotive systems, such as in in-vehicle infotainment or telematics units. Confirm applicability through the product SBOM or dependency inventory.
Multiple Siemens industrial products are affected by a vulnerability known as "Copy Fail," which stems from a flaw in the Linux kernel's cryptographic interface (algif_aead) that was previously operating in-place. An attacker could potentially exploit this issue to cause a failure in data copying during cryptographic operations, leading to a denial-of-service condition. Siemens has released software updates for some products and recommends applying them, while also advising network protection measures for devices where fixes are not yet available. This advisory does not explicitly mention automotive systems, so this could be relevant where these Siemens industrial products are deployed in automotive manufacturing or related environments; confirm applicability through the product SBOM or dependency inventory.
The advisory describes a vulnerability in util-linux where restricted bind mounts do not pin the source, allowing an attacker to redirect x-mount.owner, group, or mode settings. This could enable unauthorized changes to file ownership or permissions on the mounted filesystem. The severity is not explicitly stated in the provided text. This could be relevant where util-linux is deployed in automotive systems, such as in embedded Linux environments for infotainment or control units. Confirm applicability through the product SBOM or dependency inventory.
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically Siemens Solid Edge software used for 3D design and engineering of vehicle components. An attacker could exploit file parsing flaws in PAR, PSM, or DFT files to crash the application or execute malicious code on an engineer’s workstation, potentially disrupting vehicle design workflows or compromising sensitive manufacturing data. The severity is high, with multiple critical memory corruption vulnerabilities, and Siemens recommends updating to Solid Edge SE2026 Update 7 immediately to mitigate the risk.
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically the Simcenter Femap software used for engineering analysis and simulation in vehicle design. An attacker could exploit file parsing flaws by tricking an engineer into opening a malicious BMP file, potentially causing the application to crash or allowing arbitrary code execution on the workstation. The severity is high because successful exploitation could compromise engineering workstations and potentially disrupt vehicle development processes, so Siemens recommends updating to the latest version immediately.
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically Siemens Parasolid software used for CAD/CAM design and machining of vehicle components. An attacker could exploit the out-of-bounds read flaw by tricking an engineer into opening a malicious X_T file, potentially crashing the design workstation or executing arbitrary code on it. Siemens has released patched versions, and updating is strongly recommended to prevent disruption to vehicle design and production operations.
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically Siemens Simcenter Nastran software used for engineering simulation and structural analysis in vehicle design. An attacker could exploit a stack overflow by tricking a user into running the software with a malicious file argument, potentially achieving remote code execution on the affected workstation. Siemens has released an updated version (V2606) to fix this issue, and organizations should prioritize updating their engineering workstations to mitigate the risk.
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically ABB Ability zenon software that bundles an outdated MongoDB database component. An attacker with network access could exploit known security flaws to access sensitive information, crash the system, or disrupt production line availability. While no active exploitation has been reported, the severity is significant because the outdated component is publicly known to be vulnerable and could allow unauthorized data theft or denial of service in manufacturing environments.
GStreamer is a multimedia framework used in automotive infotainment systems for audio and video playback, and this vulnerability allows an attacker to remotely execute arbitrary code by sending a specially crafted media file that triggers a stack-based buffer overflow during parsing. An attacker could exploit this to take control of the infotainment system, potentially compromising vehicle functions or accessing sensitive data, and the severity is high due to the risk of remote code execution without authentication.
This vulnerability affects the ESP32 chipset, which is widely used in automotive infotainment systems, telematics units, and aftermarket audio devices for Bluetooth and Wi-Fi audio streaming. An attacker could exploit a heap-based buffer overflow in the ID3 tag parsing function by sending a malicious audio file, potentially allowing them to execute arbitrary code, crash the device, or access sensitive data. This is a critical security issue that could compromise vehicle audio systems and connected services.
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically Lenze Controllers and Servo Drives used in production equipment. A low-privileged attacker with local access can bypass the signature check on a file that enables SSH service access, potentially gaining full administrative control over the device and compromising the confidentiality, integrity, and availability of the manufacturing system. Lenze has released firmware updates to fix the issue, and as a temporary mitigation, operators should delete any activation files from the SD card and restrict physical and network access to the devices.
NVIDIA TensorRT is a deep learning inference engine used in automotive AI systems for ADAS, autonomous driving perception, and in-cabin monitoring. This vulnerability could allow an attacker to execute arbitrary code by exploiting improper array index validation, potentially compromising vehicle safety functions. The severity is high, as successful exploitation could lead to full system compromise in vehicles using TensorRT for real-time AI processing.
NVIDIA TensorRT is a deep learning inference engine used in automotive AI systems for ADAS, autonomous driving perception, and in-cabin monitoring. This heap-based buffer overflow vulnerability could allow an attacker to execute arbitrary code on the vehicle's AI compute platform, potentially compromising safety-critical functions. The severity is high, as it could lead to full system compromise if exploited.
NVIDIA TensorRT is a deep learning inference engine used in automotive AI systems for ADAS, autonomous driving perception, and driver monitoring. This vulnerability could allow an attacker to trigger a heap-based buffer overflow, potentially leading to remote code execution on the vehicle's AI compute platform. The severity is high, as it could compromise safety-critical functions if exploited.
The advisory describes a hard-coded cryptographic key vulnerability in the OnCell G3150A-LTE Series, which an unauthenticated remote attacker could exploit under certain conditions to obtain shared key material and impersonate affected devices that have not regenerated their keys, potentially compromising the confidentiality and integrity of management communications. The advisory does not explicitly state an automotive connection, so this could be relevant where the OnCell G3150A-LTE Series is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
Siemens SIMATIC IPCs contain a hard-coded BIOS vendor test key in the UEFI Secure Boot key database, which could let a local attacker with physical or administrative access boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot even when it is enabled. This could lead to a full loss of confidentiality, integrity, and availability of the affected device. Siemens has released new versions and recommends updating to the latest versions.
Arista Networks Wi-Fi access points are affected by a vulnerability in which an unauthenticated attacker with network access to the capture service can send a crafted packet to crash the service or potentially achieve remote code execution, though exploitation requires an uncommonly used non-default streaming mode. This could be relevant where Arista Wi-Fi access points are deployed in automotive systems, such as in-vehicle networks or automotive manufacturing facilities. Confirm applicability through the product SBOM or dependency inventory.