CVE-2023-34400 Information

Description

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file service try to define header inside the file and convert it to null-terminated string. If character is missed will return null pointer.

Reference

https://securelist.com/mercedes-benz-head-unit-security-research/115218/

Share on: