Vulnerabilities > CVE-2023-28885 - Out-of-bounds Write vulnerability in GM Mylink Infotainment System 2021.3.26

047910
CVSS 6.8 - MEDIUM
Attack vector
PHYSICAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
low complexity
gm
CWE-787

Summary

The MyLink infotainment system (build 2021.3.26) in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service (temporary failure of Media Player functionality) via a crafted MP3 file.

Vulnerable Configurations

Part Description Count
Application
Gm
1
Hardware
Gm
1

Common Weakness Enumeration (CWE)