Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB

• CVE-2023-28902 Low 3.3 Denial of Service via integer underflow in picserver 0.2%
• CVE-2023-28903 Low 3.3 An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause a denial-of-service of the infotainment system. 0.2%
• CVE-2023-28904 Medium 5.2 Bypass of secure boot process 0.3%
• CVE-2023-28905 High 8.0 Heap buffer overflow in picserver 0.4%
• CVE-2023-28906 High 7.8 Command injection in networking service 0.7%
• CVE-2023-28907 Medium 6.7 A lack of access restrictions on internal memory regions 0.2%
• CVE-2023-28908 Medium 5.4 Integer Overflow in Non-Fragmented Data Reception 0.3%
• CVE-2023-28909 High 8.0 Integer Overflow Leading to MTU Bypass 0.5%
• CVE-2023-28910 High 8.0 Disabled Abortion Flag 0.4%
• CVE-2023-28911 Medium 6.5 Arbitrary Channel Disconnection Resulting in Denial of Service 0.4%
• CVE-2023-28912 Medium 5.7 Cleartext Phonebook Information 0.2%
• CVE-2023-29113 Medium 6.3 A lack of access control in custom IPC mechanism 0.2%