CVE-2023-21643

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Aug 8, 2023
Updated: Apr 12, 2024
CWE ID 822
CWE ID 787

Summary

CVE-2023-21643 is a memory corruption vulnerability affecting automotive systems. The issue arises from an untrusted pointer dereference during a system call, allowing an attacker to manipulate memory and potentially execute arbitrary code. This vulnerability poses a serious risk to vehicle safety and security if exploited, making it crucial for affected automotive systems to be promptly patched. The pointer dereference error can lead to unintended memory access and data corruption, potentially causing functional disruptions or system crashes. The attacker can leverage this vulnerability to gain control over the system and execute malicious code, potentially leading to unauthorized access, data theft, or even vehicle takeover.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share