CVE-2023-32155 Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability
Local attackers with wifi subsystem access can exploit an out-of-bounds write in the bcmdhd driver to escalate privileges and execute kernel code.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-32155?
CVE-2023-32155 is a high-severity memory corruption vulnerability in Tesla Model 3, published on 3 May 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute code on the wifi subsystem in order to exploit this vulnerability.
The specific flaw exists within the bcmdhd driver. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. . Was ZDI-CAN-20733.
Weakness: CWE-787
Which versions are affected by CVE-2023-32155?
It affects 1 product.
Products include Tesla Model 3 Firmware.
How do I fix CVE-2023-32155?
No fix has been published for CVE-2023-32155 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-32155 being exploited?
There is no known exploitation of CVE-2023-32155 in the wild and no public exploit code.
Other vulnerabilities in Tesla Model 3
Sources
Also known as GHSA-q6gx-vcq3-62cj.