Headunit Ntg6 Mercedes-benz User Experience vulnerabilities
5 known vulnerabilities in Headunit Ntg6 Mercedes-benz User Experience from Mercedes-benz. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.7 High severity
Headunit Ntg6 Mercedes-benz User Experience: Out-of-bounds Write
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service will drop during processing. Due to missed checks, attacker can achieve Arbitrary File Write with service spee
- 7.5 High severity
Headunit Ntg6 Mercedes-benz User Experience: NULL Pointer Dereference
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file, service try to define header inside the file and convert it to null-terminated string. If character is missed, will return null pointer.
- 9.8 Critical severity
Headunit Ntg6 Mercedes-benz User Experience: Integer Overflow or Wraparound
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The version of boost library contains vulnerability integer overflow.
- 7.5 High severity
Headunit Ntg6 Mercedes-benz User Experience: NULL Pointer Dereference
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The boost library contains a vulnerability/null pointer dereference.
- 7.5 High severity
Headunit Ntg6 Mercedes-benz User Experience: Uncontrolled Resource Consumption
Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed.