Medium severity5.2NVD Advisory· Published Jun 28, 2025· Updated Jun 17, 2026

CVE-2023-28904

Description

A logic flaw leading to a RAM buffer overflow in the bootloader component of the MIB3 infotainment unit allows an attacker with physical access to the MIB3 ECU to bypass firmware signature verification and run arbitrary code in the infotainment system at boot process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Volkswagen/MIB3 Infotainment Systemllm-fuzzy
Volkswagen/MIB3llm-fuzzy

Patches

Vulnerability mechanics

References

asrg.io/security-advisories/vulnerabilities-in-volkswagen-mib3-infotainment-part-2/nvd
i.blackhat.com/EU-24/Presentations/EU-24-Parnishchev-OverTheAirVW.pdfnvd
pcacybersecurity.com/resources/advisory/vulnerabilities-in-vw-mib3-infotainment-2nvd

News mentions

No linked articles in our index yet.

cvss	0.338
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000