Tesla vulnerabilities
We track 12 vulnerabilities in Tesla products across 7 products. 12 are rated high or critical, and none are known to be exploited. The most recent was published on October 7, 2025.
Latest Tesla vulnerabilities
- 8.6 High severity
Telematics Control Unit (TCU): Improper Privilege Management
Tesla Telematics Control Unit (TCU) firmware prior to v2025.14 contains an authentication bypass vulnerability. The TCU runs the Android Debug Bridge (adbd) as root and, despite a “lockdown” check that disables adb shell, still permits adb push/pull and adb fo
- 8.8 High severity
Wall Connector: Improper Validation of Specified Quantity in Input
Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication i
- 7.5 High severity
Model 3: Integer Overflow or Wraparound
Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. Authentication is not required to exploit this vulnerability. The speci
- 7.8 High severity
Model S: Improper Neutralization of Special Elements used in an OS Command
Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the target sy
- 7.8 High severity
Model S: Heap-based Buffer Overflow
Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code on the tar
- 7.0 High severity
Model S: Execution with Unnecessary Privileges
Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code within the sandbox on the tar
- 7.8 High severity
Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape…
Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected affected Tesla Model S vehicles. An attacker must first obtain the ability to e
- 7.5 High severity
Model 3: Out-of-bounds Write
Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to pair
- 8.8 High severity
Model 3: Time-of-check Time-of-use (TOCTOU) Race Condition
Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute privileged code on
- 7.0 High severity
Model 3: Out-of-bounds Write
Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute code on the wifi subsys
- 7.8 High severity
Model 3: Buffer Copy without Checking Size of Input
This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the b
- 7.8 High severity
Model 3: Use After Free
This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the h