CVE-2024-23933
Sony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution Vulnerability
In short
A flaw in Sony XAV-AX5500's CarPlay feature allows someone with physical access to send specially crafted data that overflows a memory buffer, letting them run malicious code on the device without needing a password.
Technical detail
Stack-based buffer overflow in the Apple CarPlay protocol implementation due to insufficient length validation of TLV-encoded user-supplied data before copying to fixed-size buffer. Physical proximity required; no authentication needed. Successful exploitation results in arbitrary code execution with device privileges.
Summary generated and translated by AI from the official description.
Sony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the implementation of the Apple CarPlay protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device.
Was ZDI-CAN-23238
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Sony · XAV-AX5500Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →