CVE-2023-28885 Memory corruption in n/a
Attackers can cause a temporary denial of service in the Media Player functionality of Chevrolet Equinox vehicles by providing a crafted MP3 file.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-28885?
CVE-2023-28885 is a medium-severity memory corruption vulnerability in n/a, published on 27 Mar 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The MyLink infotainment system (build 2021.3.26) in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service (temporary failure of Media Player functionality) via a crafted MP3 file.
Weakness: CWE-787
Which versions are affected by CVE-2023-28885?
It affects 1 product.
Products include Gm Mylink Infotainment System.
How do I fix CVE-2023-28885?
No fix has been published for CVE-2023-28885 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-28885 being exploited?
There is no known exploitation of CVE-2023-28885 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-cj8x-r7cp-9cjg.