Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
Multiple vulnerabilities have been discovered in Curl affecting versions prior to 8.23.0, and they could allow an attacker to achieve remote arbitrary code execution, remote denial of service, and a breach of data confidentiality. The advisory does not specify a severity level. This could be relevant where Curl or libcurl is deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
Multiple vulnerabilities were discovered in the Red Hat Linux kernel, and some of them allow an attacker to achieve remote arbitrary code execution, privilege escalation, and remote denial of service. The affected component is the Red Hat Linux kernel across numerous Red Hat Enterprise Linux and CodeReady Linux Builder releases and architectures, and the advisory does not specify a severity level. This could be relevant where the Red Hat Linux kernel is deployed in automotive systems, but the advisory does not confirm an automotive connection; confirm applicability through the product SBOM or dependency inventory.
Multiple vulnerabilities have been discovered in OpenSSH versions prior to 10.6, and some of them could allow an attacker to achieve remote arbitrary code execution, privilege escalation, and compromise of data confidentiality. The advisory does not specify a severity rating. This could be relevant where OpenSSH is deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
A vulnerability in the wireless gateway service on affected Arista Wi-Fi access points, when captive portal or application firewall is enabled on at least one SSID, could let an unauthenticated network-adjacent attacker send a crafted packet that triggers a stack overflow, causing a denial-of-service condition or potentially allowing arbitrary code execution on the device. The service restarts automatically after a crash, so repeated exploitation attempts are possible. This could be relevant where such access points are deployed in automotive manufacturing, logistics, or connected-vehicle environments; confirm applicability through the product SBOM or dependency inventory.
Multiple vulnerabilities were found in HPE Aruba Networking EdgeConnect SD-WAN Gateways and Orchestrator products, and some of them let an attacker run arbitrary code remotely, gain elevated privileges, or cause a remote denial of service. The advisory also lists impacts including data integrity and confidentiality compromise, server-side request forgery, and security policy bypass. This could be relevant where these SD-WAN components are deployed in automotive systems, for example in connected vehicle, plant, or fleet network infrastructure; confirm applicability through the product SBOM or dependency inventory.
Multiple vulnerabilities have been discovered in Fortinet products, including FortiSIEM, FortiManager, FortiOS, FortiProxy, FortiSandbox, FortiSOAR, FortiAnalyzer, FortiPAM, FortiClient and FortiMonitorOnSight, at various versions listed in the advisory. An attacker could exploit some of these to achieve remote arbitrary code execution, privilege escalation, or remote denial of service, with impacts also including data confidentiality and integrity compromise and security policy bypass. This could be relevant where Fortinet products are deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
Red Hat has released an Important-severity update for webkit2gtk3 on Red Hat Enterprise Linux 9, addressing multiple memory-safety flaws in the ANGLE component of the Chromium browser, including use after free, out of bounds write and read, buffer overflow, type confusion, and uninitialized resource issues. An attacker could potentially exploit these flaws to cause memory corruption or other harmful behavior in affected systems. This could be relevant where webkit2gtk3 or ANGLE-based rendering components are deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
The advisory covers security vulnerabilities in Apple iOS and iPadOS, where flaws such as out-of-bounds reads and writes, use-after-free errors, integer overflows, type confusion, and improper permission checks could let attackers cause memory corruption, crashes, privilege escalation, sandbox escapes, denial of service, or unauthorized access to sensitive user data via crafted files, network traffic, web content, or local access; severity is rated medium likelihood and high damage. This could be relevant where Apple iOS or iPadOS devices are deployed in automotive systems, for example as in-vehicle infotainment or companion mobile devices, but the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
The Bluetooth HCI USB transport class in the new USB device stack copies controller-to-host HCI packets into a fixed 64-byte pool slot without a length check, so oversized packets can overflow into adjacent memory. An unauthenticated attacker within Bluetooth range could send oversized ACL fragments or extended advertising data to corrupt memory with attacker-chosen contents, potentially leading to arbitrary code execution on targets without memory protection, while builds with assertions enabled would panic instead, giving a remotely triggerable denial of service. This could be relevant where this USB device stack and Bluetooth HCI transport are deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
The advisory describes a vulnerability in the xen/pvcalls component, where the backend response req_id is not bounded before indexing rsp[], which could allow an attacker to trigger out-of-bounds access. This could be relevant where the xen/pvcalls component is deployed in automotive systems, though the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
Wasmtime versions before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 contain a filesystem sandbox escape in the wasmtime-wasi component, caused by its cap-std dependency mishandling symlinks with trailing slashes on macOS and Linux kernels lacking openat2. A guest with write access to any sandboxed directory can read and write any host-accessible file, and read-only guests may read host files via preexisting symlinks. This could be relevant where Wasmtime is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
Grafana, a metrics dashboard and graph editor, is affected by a set of Go library flaws addressed in this Red Hat update, which Red Hat rates Important overall; the most serious issues allow a remote attacker to cause a denial of service through crafted TLS 1.3 key update messages or excessive certificate chains, and one flaw can leak sensitive HTTP headers such as Authorization to the wrong domain after a redirect chain. This could be relevant where Grafana is deployed in automotive systems, for example on monitoring or telematics infrastructure, but the advisory does not establish any automotive connection. Confirm applicability through the product SBOM or dependency inventory.
The advisory covers a Red Hat update for Grafana, an open source metrics dashboard and graph editor, addressing numerous flaws in the Go standard library components it uses, including net/http, crypto/tls, crypto/x509, net/mail, mime, encoding/asn1, encoding/xml, net/url and html/template. An attacker could exploit these issues to disclose sensitive headers such as Authorization after a cross-domain redirect, bypass certificate validation during TLS session resumption, conduct man-in-the-middle attacks via untrusted intermediate certificates, trigger cross-site scripting, or cause denial of service through resource exhaustion in certificate chain building, TLS 1.3 key updates, XML decoding, MIME header parsing and other inputs. Red Hat rates the overall update as Important, with individual flaws ranging from Moderate to Important severity. This could be relevant where Grafana or its bundled Go components are deployed in automotive systems, but the advisory does not confirm any automotive deployment. Confirm applicability through the product SBOM or dependency inventory.
The advisory covers an update to the Go toolset (golang) for Red Hat Enterprise Linux 8.6, addressing multiple flaws in Go's standard library, including a net/http issue where sensitive headers such as Authorization can be incorrectly sent to a different domain after a chain of redirects, potentially exposing credentials. It also lists certificate validation weaknesses in crypto/x509 and crypto/tls that could allow invalid certificates to be accepted, plus several denial-of-service and memory-safety issues in components such as net/http, encoding/asn1, encoding/xml and cmd/compile; Red Hat rates the overall update as Important, with individual flaws ranging from Moderate to Important. This could be relevant where the Go toolset or applications built with it are deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
Google Chrome versions before 156.0.8078.47 contain an improper input validation flaw in Bluetooth that a remote attacker could exploit through a crafted HTML page to potentially execute arbitrary code inside the sandbox, rated Medium severity by Chromium. This could be relevant where Chrome or its embedded Chromium components are deployed in automotive systems, such as in vehicle infotainment or telematics environments. Confirm applicability through the product SBOM or dependency inventory.
Google Chrome versions before 156.0.8078.47 contain a memory corruption flaw in their Bluetooth handling that a remote attacker could exploit through a crafted HTML page, potentially executing arbitrary code inside the browser sandbox; Google rates the Chromium security severity as Medium. The advisory does not establish an automotive connection, but this could be relevant where Chrome or Chromium-based browser components are deployed in automotive systems, such as in vehicle infotainment or telematics units. Confirm applicability through the product SBOM or dependency inventory.
Google Chrome before version 156.0.8078.47 contains a memory corruption flaw in its Bluetooth component that lets a remote attacker execute arbitrary code inside the browser sandbox by way of a crafted HTML page, rated Medium severity by Chromium. This could be relevant where Chrome or Chromium-based browser components are deployed in automotive systems, such as in infotainment or telematics head units. Confirm applicability through the product SBOM or dependency inventory.
WAGO controllers (CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller and WP400) running WAGO OS Linux have two flaws in their web-based management interface: an authenticated low-privileged user can inject shell commands into routing settings to run commands as root, and can make unauthorized changes to protected PROFIBUS configuration parameters such as device addressing and SSA settings. The advisory does not state a severity rating; it directs users to update to firmware version 4.10.0 (FW32) or later. This could be relevant where these WAGO controllers are deployed in automotive or other industrial systems; confirm applicability through the product SBOM or dependency inventory.
Red Hat has released an Important-severity kernel update for Red Hat Enterprise Linux 8 that fixes multiple memory-safety flaws, including a heap overflow in the USB serial io_ti driver that a malicious USB device can trigger, and use-after-free issues in SCTP, netfilter, perf and strparser that can crash the system or, in some cases, allow privilege escalation. The advisory explicitly lists Red Hat In-Vehicle OS among the affected products for the netfilter flowtable use-after-free (CVE-2026-98320), which an attacker could exploit during network flow processing to cause a denial of service via system crash or instability. The advisory also states that fixes for affected product streams are being pursued.
Red Hat has released an Important-severity update for the real-time Linux kernel (kernel-rt) in Red Hat Enterprise Linux 8, fixing multiple memory-safety flaws including a heap overflow in a USB serial driver, use-after-free issues in SCTP, netfilter and perf, and an out-of-bounds read in encrypted network traffic handling. An attacker could exploit these flaws to crash the system (denial of service), and in some cases potentially execute code, escalate privileges or expose sensitive kernel memory. The advisory explicitly names Red Hat In-Vehicle OS as an affected product for the netfilter flowtable use-after-free flaw, which could let an attacker trigger a system crash or instability during network flow processing.
Apple fixed a stack overflow in iOS, iPadOS, macOS and visionOS by improving input validation, and an attacker using a paired Bluetooth device may be able to execute arbitrary code. The advisory does not state a severity rating. This could be relevant where Apple platforms or their Bluetooth stack are deployed in automotive systems, such as in-car infotainment or telematics units; confirm applicability through the product SBOM or dependency inventory.
A flaw in the Linux kernel's Bluetooth HCI synchronization allows a local user to trigger a stack buffer overflow by binding a Bluetooth socket with an excessive number of Isochronous Stream entries, causing memory corruption that can crash the system (denial of service). The advisory also lists numerous other kernel vulnerabilities, including a Bluetooth MGMT flaw where an oversized encryption size causes a stack buffer overflow and denial of service, and an ixgbevf network driver use-after-free rated Important that could cause a kernel crash or, in some cases, arbitrary code execution. Red Hat rates the overall update as Important, and the advisory explicitly states that Red Hat In-Vehicle OS kernels are impacted by the ixgbevf flaw, confirming an automotive connection.
The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled, and an attacker with network access to the device can log in as root and take full control of it. This could be relevant where this device is deployed in automotive systems, such as in-vehicle or roadside equipment. Confirm applicability through the product SBOM or dependency inventory.
An update for the real-time Linux kernel (kernel-rt) on Red Hat Enterprise Linux 9.2 for SAP Solutions fixes several Important-severity flaws in kernel networking and storage components, including use-after-free and memory corruption issues in the xfrm, IPv6 tunnel, UDP tunnel segmentation, and NVMe-over-Fabrics authentication code. An attacker could exploit these to crash the system (denial of service), and in some cases cause memory corruption or potentially execute unauthorized code, with the NVMe flaw remotely triggerable and several others reachable by a local unprivileged user. This could be relevant where the real-time Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
A heap-based buffer overflow in the Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally on affected Microsoft Windows 10, Windows 11, and Windows Server systems. This could be relevant where Windows-based systems are deployed in automotive environments, such as engineering workstations, diagnostic platforms, or in-vehicle compute units running Windows. Confirm applicability through the product SBOM or dependency inventory.