Security researchers reveal Bluetooth vulnerabilities affecting vehicles from multiple vendors
Vulnerabilities: Use-after-free; improper validation; incorrect function termination, function call with incorrect parameter
Impact: Can potentially allow access to the car's internals through the infotainment system
Vulnerability IDs: CVE-2024-45431 to CVE-2024-45434
Remediation:
- Patches were released last year on the underlying SDK
- Vendors using the SDK need to apply the patches
#cybersecurity #automotivesecurity #Bluetooth
https://www.bleepingcomputer.com/news/security/perfektblue-bluetooth-flaws-impact-mercedes-volkswagen-skoda-cars/