Description

The MyLink infotainment system (build 2021.3.26) in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service (temporary failure of Media Player functionality) via a crafted MP3 file.

Related CPE's

a

gm

mylink_infotainment_system

2021.3.26

Vulnerable

h

gm

chevrolet_equinox

2021

-

References

https://github.com/zj3t/Automotive-vulnerabilities/tree/main/GM/Chevrolet_Equinox2021

https://github.com/zj3t/GM_Vulnerability

Third Party Advisory

https://github.com/zj3t/Automotive-vulnerabilities/tree/main/GM/Chevrolet_Equinox2021

https://github.com/zj3t/GM_Vulnerability

Third Party Advisory

Weaknesses

[email protected]

Primary
CWE-787

134c704f-9b21-4f2e-91b3-4a467353bcc0

Secondary
CWE-787

CVSS impact metrics

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-03-27T04:15:10.553

2 years ago

Last modified

2025-02-19T17:15:13.793

4 months ago