high7.5
CVE-2023-34400
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB.
Impact
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file, service try to define header inside the file and convert it to null-terminated string. If character is missed, will return null pointer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mercedes-Benz | Headunit Ntg6 Mercedes-Benz User Experience | through 2021 |