Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
A heap-based buffer overflow in the Windows Bluetooth Service allows an unauthorized attacker on an adjacent network to elevate privileges on affected Microsoft Windows 10, Windows 11, and Windows Server systems. This could be relevant where Windows-based systems are deployed in automotive environments, such as in-vehicle infotainment, telematics, or diagnostic and engineering workstations that use Bluetooth. Confirm applicability through the product SBOM or dependency inventory.
The advisory covers a Use of Unmaintained Third-Party Components vulnerability (CVE-2026-96434) in Schneider Electric's Pro-face STW6000 and Harmony STW6 Basic Web HMI panels, which are operator interface products used for machine visualization and connectivity. An attacker could exploit this by having a user visit a malicious webpage, potentially gaining unauthorized control of the device and causing operational failures. The vulnerability carries a High severity rating with a CVSS v4.0 base score of 8.6. This could be relevant where these HMI panels are deployed in automotive manufacturing or industrial systems. Confirm applicability through the product SBOM or dependency inventory.
Multiple SIMATIC WinCC versions contain a database privilege escalation vulnerability that lets an authenticated attacker with database access run commands on the host system where WinCC is installed. This could lead to a full compromise of that system. Siemens has released fixes for several affected products and is preparing further fixes, recommending mitigations where updates are not yet available.
RUGGEDCOM CROSSBOW, a Siemens industrial network management product, contains multiple vulnerabilities that could let an authenticated attacker run arbitrary SQL commands on its database, retrieve administrative credentials, escalate privileges, and perform unauthorized actions such as changing configurations or causing a denial of service. Siemens has released a new version and recommends updating to the latest version. The advisory does not state a numeric severity rating.
Zephyr's userspace kernel object allocation has an integer overflow: an unprivileged user-mode thread can pass a near-maximum size value that wraps the internal allocation calculation, producing a tiny heap chunk that is then written to as a full kernel object. This lets an attacker perform a supervisor-mode out-of-bounds write into the kernel heap, corrupting kernel memory and potentially escaping the userspace sandbox to achieve kernel-level code execution. This could be relevant where Zephyr is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
The Bluetooth LE Audio Broadcast Sink in Zephyr contains an out-of-bounds write when it copies subgroup metadata from a received Basic Audio Announcement into a fixed-size static structure without checking bounds. An attacker within radio range who operates or impersonates a broadcast source the device syncs to can write attacker-controlled bytes past the end of that structure, causing memory corruption of adjacent Bluetooth audio state with no pairing or connection required, and potentially enabling remote code execution in the Bluetooth receive thread; the advisory also notes out-of-bounds memory could be disclosed to a connected Broadcast Assistant. This could be relevant where Zephyr's LE Audio Broadcast Sink is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
Cisco released security hardening updates for Cisco Campus Gateway Software, Cisco Meraki MR Wireless Access Points Software, Cisco Meraki MV Firmware, and Cisco Meraki MX Firmware to address internally discovered improper neutralization of special elements vulnerabilities tracked as CVE-76472. An attacker could exploit these issues to manipulate special elements that the software fails to neutralize properly, though the advisory does not state the specific technical impact or severity rating. This could be relevant where Cisco Meraki or Campus Gateway components are deployed in automotive systems, such as in vehicle connectivity, fleet, or charging infrastructure networks. Confirm applicability through the product SBOM or dependency inventory.
Cisco released a hardening update for several Meraki products, including MR wireless access points, MV cameras, MX security appliances, and Campus Gateway software, to fix multiple internally discovered incorrect-calculation vulnerabilities tracked as CVE-2026-76470. The advisory does not state what an attacker could specifically do or provide a severity rating, so the practical impact is not described. This could be relevant where Meraki networking equipment is deployed in automotive manufacturing, logistics, or connected-vehicle environments, but the advisory does not confirm an automotive connection. Confirm applicability through the product SBOM or dependency inventory.
Cisco released a security hardening update addressing improper access control vulnerabilities, tracked as CVE-2026-76463 and classified under CWE-284, affecting Cisco Campus Gateway Software, Cisco Meraki MR Wireless Access Points Software, Cisco Meraki MV Firmware, and Cisco Meraki MX Firmware. The advisory states these issues were internally discovered and relate to improper access control, though it does not specify the exact attacker actions or impact. This could be relevant where Cisco Meraki or Campus Gateway components are deployed in automotive systems, for example in vehicle-to-infrastructure or fleet networking environments. Confirm applicability through the product SBOM or dependency inventory.
Google has fixed numerous security vulnerabilities in Android, with Samsung also patching the issues relevant to its mobile devices, affecting components such as Bluetooth subsystems, network parsing, device management, and audio controllers. An attacker could exploit these flaws to cause memory corruption, escalate privileges, leak information, cause denial-of-service, or gain control of the system, either locally or remotely, often without user interaction. The advisory rates the likelihood of exploitation as medium and the potential damage as high. This could be relevant where Android-based components are deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
Zephyr's Bluetooth Mesh On-Demand Private Proxy solicitation handler contains a stack buffer overflow where an oversized Solicitation PDU is copied into a fixed 17-byte buffer without a length check, and the copy happens before any decryption or authentication. Any device in radio range can send a crafted non-connectable advertisement to a node with the On-Demand Private Proxy server enabled and eligible to be solicited, with no pairing, bonding, or provisioning required, causing an attacker-controlled stack overwrite that could plausibly lead to remote code execution and at minimum a reliable remote denial of service. This could be relevant where Zephyr's Bluetooth Mesh stack is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
Google Chrome before version 155.0.8059.39 contains an incorrect authorization flaw in its Bluetooth implementation that could let a remote attacker obtain sensitive information through a crafted HTML page, rated Medium severity by Chromium. This could be relevant where Chrome or its Bluetooth component is deployed in automotive systems, such as in-vehicle infotainment or telematics units. Confirm applicability through the product SBOM or dependency inventory.
MediaTek reports a missing bounds check in a video decoder component that could allow a remote attacker to write outside intended memory and gain elevated privileges, though the user must interact with the device for exploitation. This could be relevant where MediaTek chipsets are deployed in automotive systems, since such chipsets may be used in in-vehicle infotainment or telematics hardware. Confirm applicability through the product SBOM or dependency inventory.
Mitsubishi Electric GX Works3 and Motion Control Settings contain an authentication flaw that lets a local attacker bypass block password checks and gain access to control programs. Once in, the attacker could view, tamper with, destroy, or delete those programs. The advisory does not state a numeric severity score, but it is classified as critical manufacturing infrastructure software, and this could be relevant where such engineering tools are deployed in automotive manufacturing or control environments; confirm applicability through the product SBOM or dependency inventory.
Nozomi Networks Labs found a missing-authentication flaw in the edgserver management protocol of Advantech EKI-1242EIMS firmware V1.06.01, which lets a remote unauthenticated attacker invoke critical device-management functions such as network reconfiguration, reboot, reset, and firmware upgrade via crafted requests to TCP port 5058. The advisory does not confirm an automotive deployment, so this could be relevant where the affected Advantech device is deployed in automotive systems. Confirm applicability through the product SBOM or dependency inventory.
A logic error in the Cellular Modem component could allow an attacker to disclose information and potentially achieve remote code execution without any user interaction or extra privileges. This could be relevant where the Cellular Modem component is deployed in automotive systems, since cellular modems are commonly used for vehicle connectivity. Confirm applicability through the product SBOM or dependency inventory.
A heap buffer overflow in the Cellular Modem component could allow a remote attacker to write out of bounds and escalate privileges without any user interaction or additional execution privileges. This could be relevant where the Cellular Modem component is deployed in automotive systems, since cellular modems are commonly used for vehicle connectivity. Confirm applicability through the product SBOM or dependency inventory.
A missing bounds check in the Cellular Modem component could allow an attacker to write outside intended memory boundaries, potentially leading to remote code execution without requiring any user interaction or extra privileges. This could be relevant where cellular modem components are deployed in automotive systems, since such modems are commonly used for vehicle connectivity. Confirm applicability through the product SBOM or dependency inventory.
PJSIP, a multimedia communication library, has a stack buffer overflow vulnerability in its GnuTLS TLS backend when parsing a peer certificate's Subject Alternative Name. A network attacker presenting a crafted certificate could trigger this during a TLS handshake, potentially causing application termination or memory corruption. This could be relevant where PJSIP is deployed in automotive systems, such as for telematics or communication functions, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
A flaw was found in WebKitGTK where processing malicious web content can cause memory corruption due to improper memory handling. This could be relevant where WebKitGTK is deployed in automotive systems, such as in infotainment or embedded web browsers. Confirm applicability through the product SBOM or dependency inventory.
genieacs-mcp, an MCP server for GenieACS, has a vulnerability prior to version 0.3.2 where its HTTP listener on localhost lacks authentication and does not validate Host or Origin headers. A malicious website could exploit DNS rebinding to access this listener and invoke operations against the GenieACS NBI, potentially exposing or modifying CPE management state such as device reboots, firmware tasks, and TR-069 parameter changes. This could be relevant where genieacs-mcp is deployed in automotive systems that use GenieACS for device management; confirm applicability through the product SBOM or dependency inventory.
The advisory describes a vulnerability in the Zephyr virtio driver where a malicious or compromised virtio backend can supply an out-of-range descriptor id, leading to an arbitrary function-pointer call in the guest's interrupt context. This can result in code execution or a crash, with no guest privileges or user interaction required, and the severity is high due to the control-flow-hijack primitive. This could be relevant where Zephyr's virtio driver is deployed in automotive systems, such as in virtualized or partitioned environments, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
A use-after-free vulnerability exists in WebKitGTK, where processing malicious web content can cause improper memory handling and lead to memory corruption. An attacker could exploit this by delivering crafted web content to trigger the flaw, potentially compromising the affected system. The advisory lists Red Hat Enterprise Linux 6 through 9 as affected, with no severity rating stated. This could be relevant where WebKitGTK is deployed in automotive systems, such as in infotainment or embedded web browsers. Confirm applicability through the product SBOM or dependency inventory.
The advisory describes a stack buffer overflow in Zephyr's HL7800 cellular modem driver, where a malicious or impersonated cellular network can send a crafted response with an overlong address field during normal network attach. This can cause a crash or potentially allow control-flow hijacking on the device, with no user interaction required. The affected component is a modem driver, which could be relevant where Zephyr is deployed in automotive systems with cellular connectivity; confirm applicability through the product SBOM or dependency inventory.
The advisory describes a vulnerability in the Zephyr operating system's flash_copy() system call, where missing validation of device pointers allows an unprivileged user to execute arbitrary code in supervisor mode, leading to local privilege escalation, denial-of-service, or information disclosure. The affected component is the flash driver subsystem, which could be relevant where Zephyr is deployed in automotive systems, such as in embedded controllers or telematics units. Confirm applicability through the product SBOM or dependency inventory.