Artem Ivachev from PCA Cyber Security (PCAutomotive)

A lack of access restrictions on internal memory regions

Command injection in networking service

Heap buffer overflow in picserver

An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause a denial-of-service of the infotainment system.

Denial of Service via integer underflow in picserver

A lack of access control in custom IPC mechanism

Cleartext Phonebook Information