Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
1962advisories found
csaf_nozominetworksmedium · 6.0
nn-2026:15-01
This vulnerability affects the local web interface used in automotive manufacturing plants and assembly lines, where Arc network monitoring appliances are deployed to oversee industrial control systems. An attacker with local network access could exploit the path traversal flaw to read arbitrary files from the appliance’s file system, potentially exposing configuration details or credentials. The risk is rated medium, meaning it requires some level of access and does not directly compromise vehicle safety, but it could aid in deeper attacks on plant operations.
nvdmedium · 5.9
cve-2026-92091
A flaw in the jwcrypto library causes excessive CPU consumption when it validates a JWK key_ops array containing many entries, because the duplicate-checking algorithm scales quadratically and the array length is unbounded. A remote, unauthenticated attacker can supply a crafted JWK to an application that imports attacker-controlled key material, resulting in a denial of service. This could be relevant where jwcrypto is deployed in automotive systems, for example in backend services, telematics platforms, or EV-charging infrastructure that handle JWK-based key exchange or registration. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium · 5.9
cve-2026-15924
Zephyr's TLS socket layer shares one global client-session cache across all TLS sockets, and concurrent access from multiple threads could free or read a session buffer while another thread is still using it, causing memory corruption. An attacker, potentially a malicious server that increases session-ticket frequency, could widen the timing window and trigger a crash or heap corruption, resulting in denial of service. This could be relevant where Zephyr is deployed in automotive or embedded systems, so confirm applicability through the product SBOM or dependency inventory.
nvdmedium · 5.9
cve-2026-85534
A vulnerability exists in libsoup, a software library used for handling HTTP networking. When a client sends data over an HTTP/2 connection, a malicious server can manipulate network settings to cause the client to crash or fail the connection. This could be relevant where libsoup is deployed in automotive systems, such as in infotainment or connectivity modules that use HTTP/2 for data exchange. Confirm applicability through the product SBOM or dependency inventory.
nvdmedium · 5.9
cve-2026-13217
A NULL-pointer dereference vulnerability exists in the Zephyr OCPP 1.6 client's handling of CALLRESULT messages, where a server-supplied uid field is parsed without checking for missing delimiters. An attacker controlling or intercepting the OCPP connection can send a malformed uid, causing a crash that results in a remote denial of service on affected charge point platforms. The severity is availability-only and platform-conditional, and the issue is directly relevant to automotive and EV charging systems using Zephyr's OCPP stack.
cvelistv5medium · 5.8
cve-2026-19359
This vulnerability affects the AWS Lambda function used in NXP’s GoldVIP automotive software platform, which handles cloud-based vehicle data processing and fleet analytics for connected car services. An attacker could exploit improper access controls in the SitewiseCustomFunction to remotely manipulate data or gain unauthorized access to vehicle-related cloud resources, potentially compromising the integrity of fleet operations or exposing sensitive telemetry. The issue is rated as high severity, but NXP has already fixed it in version 1.15.0, so affected deployments should upgrade immediately to prevent exploitation.
nvdmedium · 5.7
cve-2026-56975
A denial-of-service vulnerability exists in the Cellular Modem component due to improper input validation, which an attacker within close range could exploit remotely without any special privileges or user interaction. This could be relevant where cellular modem components are deployed in automotive systems, potentially disrupting connectivity-dependent functions. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium · 5.7
cve-2026-80185
BlueZ, a Bluetooth software stack, contains a vulnerability in its SDP XML parser that can be exploited by an unprivileged local user or an adjacent Bluetooth peer to crash the bluetoothd daemon, potentially leading to arbitrary code execution as root. The issue stems from a type confusion flaw where crafted service record data can corrupt the parser's stack. This could be relevant where BlueZ is deployed in automotive systems for Bluetooth connectivity; confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium · 5.7
cve-2026-71967
This vulnerability affects OP-TEE, the trusted execution environment operating system used in vehicle secure gateways, digital keys, and secure boot systems across multiple automotive platforms. An attacker with local access could crash the secure environment by sending a specially crafted session request to the Widevine component, potentially disabling security-critical functions like key management and secure storage. The severity is moderate as it requires local access and causes a denial of service rather than remote compromise, but it could disrupt vehicle security features until the system is rebooted.
nvdmedium · 5.5
cve-2026-76781
A flaw in libxml2 causes a NULL pointer dereference when parsing an XML catalog containing a nextCatalog element that lacks its required catalog attribute, which can crash the application and result in a denial of service. An attacker who can supply a specially crafted XML catalog, or a local user, can trigger this crash. This could be relevant where libxml2 is deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
nvdmedium · 5.5
cve-2026-58731
A local attacker could exploit an out-of-bounds read caused by uninitialized data in multiple functions of physmem_extmem_linux.c, potentially disclosing information without needing any additional privileges or user interaction. This could be relevant where this Android component is deployed in automotive systems, such as in in-vehicle infotainment or telematics units. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium · 5.5
cve-2026-20515
A vulnerability in a MediaTek chipset's GPU component could cause a system crash due to a use-after-free flaw, potentially leading to local information disclosure. Exploitation requires user interaction and user-level privileges. This could be relevant where MediaTek chipsets are deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium · 5.5
cve-2026-20516
The advisory describes a confused deputy vulnerability in MiracastService on MediaTek chipsets that could allow a local attacker with user privileges to cause a denial of service, without requiring user interaction. The stated severity is not explicitly provided, but the technical impact is local denial of service. This could be relevant where MediaTek chipsets are deployed in automotive systems, such as infotainment or connectivity units; confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium · 5.5
cve-2026-20500
The advisory describes a vulnerability in a MediaTek modem component where improper input validation could cause a system crash, leading to a local denial of service. An attacker would need user execution privileges and user interaction to exploit this issue. This could be relevant where MediaTek chipsets with this modem are deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
nvdmedium · 5.5
cve-2026-13478
The advisory describes an out-of-bounds read vulnerability in the Zephyr ext2 filesystem driver, where a crafted disk image with an oversized block count causes the driver to scan roughly 512 MB of memory beyond its intended buffer during the mount process. An attacker who can supply a malicious ext2 image—via removable media, a disk partition, or a downloaded file—can trigger this flaw, leading to a system crash and denial of service, though no sensitive data is leaked. The severity is not explicitly rated, but the impact is a crash from mounting a single malformed image. This could be relevant where Zephyr is deployed in automotive systems, such as infotainment or telematics units that mount external storage. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium · 5.5
cve-2026-45271
Picotls, a TLS protocol library, contains a vulnerability in its ASN.1 validation helper used by the minicrypto backend when parsing private-key files. An attacker could supply a deeply nested, crafted private-key file that causes the process to crash due to stack exhaustion, resulting in a denial of service. The issue is fixed in a specific commit, and the OpenSSL backend is not affected. This could be relevant where picotls is deployed in automotive systems, such as for secure communications, but the advisory does not confirm automotive use; confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium · 5.5
cve-2026-76924
Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 contain an out-of-bounds read vulnerability in the Kerberos protocol dissector, which can cause a crash and lead to a denial of service when processing malformed network traffic. This could be relevant where Wireshark is deployed in automotive systems for network analysis or diagnostics, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium · 5.5
cve-2026-76923
The advisory describes an out-of-bounds read vulnerability in the Bluetooth Hands-Free Profile (HFP) protocol dissector of Wireshark, affecting versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18. An attacker can exploit this flaw to crash the application, resulting in a denial of service. This could be relevant where Wireshark is deployed in automotive systems for network analysis or diagnostics, though the advisory does not confirm automotive use; confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium · 5.5
cve-2026-76922
Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 contain a null pointer dereference vulnerability in the Bluetooth BR/EDR FHS protocol dissector, which can cause a crash and lead to a denial of service when processing crafted packets. This could be relevant where Wireshark is deployed in automotive systems for network analysis or diagnostics, as a successful attack could disrupt such analysis tools. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium · 5.5
cve-2026-76921
Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 contain a use-after-free vulnerability in the CMS protocol dissector that can cause a crash, leading to a denial of service. An attacker could exploit this by crafting malicious network traffic to crash the application. This could be relevant where Wireshark is deployed in automotive systems for network analysis or diagnostics, but the advisory does not confirm automotive use; confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium · 5.5
cve-2026-76918
The advisory describes a heap-based buffer overflow in Wireshark's SSH protocol dissector, affecting versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18, which allows an attacker to crash the application, resulting in a denial of service. This could be relevant where Wireshark is deployed in automotive systems for network analysis or diagnostics, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium · 5.5
cve-2026-76917
Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 contain a heap-based buffer overflow in the Bluetooth AVRCP Profile protocol dissector, which an attacker could exploit to crash the application, resulting in a denial of service. This could be relevant where Wireshark is deployed in automotive systems for analyzing Bluetooth traffic, such as in vehicle diagnostics or telematics testing. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium · 5.4
cve-2026-15460
The advisory describes a vulnerability in Zephyr's Bluetooth Classic L2CAP receive handler, where inbound data is processed on channels that have not yet reached a fully connected state. An attacker within radio range could exploit this to deliver data to upper-layer protocols on unauthenticated or half-open channels, potentially causing denial of service through channel or link teardown, and in some cases a dangling-pointer condition. The severity is not explicitly rated, but the technical impact includes data injection and system instability. This could be relevant where Zephyr's Bluetooth Classic stack is deployed in automotive systems, such as in-vehicle infotainment or telematics units, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
csaf_nozominetworksmedium · 5.4
nn-2026:17-01
An access control vulnerability exists in the Smart Polling configuration feature of Guardian/CMC versions before 26.3.0, caused by insufficient validation of user privileges. An attacker could exploit this to perform unauthorized configuration changes. The risk level for Nozomi customers is rated as Medium. This could be relevant where Guardian/CMC is deployed in automotive or industrial network monitoring systems; confirm applicability through the product SBOM or dependency inventory.
cvelistv5medium · 5.4
cve-2026-14368
The advisory describes a one-byte out-of-bounds write vulnerability in the Zephyr LwM2M JSON string parser, where a malicious LwM2M server can send a string resource value that exactly fills a buffer, causing a NUL byte to be written past the buffer's end. This can corrupt adjacent memory, potentially leading to data corruption or a crash, though it is not a direct code-execution or information-leak risk. The issue is rated as a security flaw in Zephyr's networking stack, and since Zephyr is an embedded operating system, this could be relevant where Zephyr is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.