CVE-2019-13581

An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parrot Faurecia Automotive FC6050W module. A heap-based buffer overflow allows remote attackers to cause a denial of service or execute arbitrary code via malformed Wi-Fi packets.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-11-15

Last modified

2024-08-04

Weaknesses

CWE-787

Affected products

• 88w8688 Firmware (Marvell)

References

• https://keenlab.tencent.com/en/2020/01/02/exploiting-wifi-stack-on-tesla-model-s/
• https://www.marvell.com/documents/ioaj5dntk2ubykssa78s/