NA - CVE-2023-28906 - A command injection in the networking service...
A command injection in the networking service of the MIB3 infotainment allows an attacker already presenting in the system to escalate privileges and obtain administrative access to the system. The...
NA - CVE-2023-28907 - There is no memory isolation between CPU cores...
There is no memory isolation between CPU cores of the MIB3 infotainment. This fact allows an attacker with access to the main operating system to compromise the CPU core responsible for CAN message...
NA - CVE-2023-28908 - A specific flaw exists within the Bluetooth...
A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow when...
NA - CVE-2023-28909 - A specific flaw exists within the Bluetooth...
A specific flaw exists within the Bluetooth stack of the MIB3 unit. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow when...
NA - CVE-2023-28910 - A specific flaw exists within the Bluetooth...
A specific flaw exists within the Bluetooth stack of the MIB3 infotainment system. The issue results from the disabled abortion flag eventually leading to bypassing assertion functions. The...
NA - CVE-2023-28911 - A specific flaw exists within the Bluetooth...
A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results from the lack of proper validation of user-supplied data, which can result in an arbitrary channel...
NA - CVE-2023-28912 - The MIB3 unit stores the synchronized phone...
The MIB3 unit stores the synchronized phone contact book in clear-text, allowing an attacker with either code execution privilege on the system or physical access to the system to obtain vehicle...
NA - CVE-2023-29113 - The MIB3 infotainment unit used in Skoda and...
The MIB3 infotainment unit used in Skoda and Volkswagen vehicles does not incorporate any privilege separation for the proprietary inter-process communication mechanism, leaving attackers with...
Low - CVE-2025-6818 - A vulnerability, which was classified as...
A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5O__chunk_protect of the file /src/H5Ochunk.c. The manipulation leads to heap-based buffer...
High - CVE-2025-6819 - A vulnerability has been found in code-projects...
A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file...