Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gh3v-mv9p-hffw

Опубликовано: 14 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder there is a file, which is encoded with proprietary UD2 codec. Due to missed size checks in the enapsulate file, attacker can achieve Out-of-Bound Read in heap memory.

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder there is a file, which is encoded with proprietary UD2 codec. Due to missed size checks in the enapsulate file, attacker can achieve Out-of-Bound Read in heap memory.

EPSS

Процентиль: 25%
0.00085
Низкий

3.7 Low

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 3.7
nvd
12 месяцев назад

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder there is a file, which is encoded with proprietary UD2 codec. Due to missed size checks in the enapsulate file, attacker can achieve Out-of-Bound Read in heap memory.

CVSS3: 5.5
fstec
около 1 года назад

Уязвимость службы libspeech системы мультимедиа Mercedes-Benz User Experience (MBUX), позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 25%
0.00085
Низкий

3.7 Low

CVSS3

Дефекты

CWE-125