On Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehicles, the Bluetooth stack mishandles %x and %c format-string specifiers in a device name in the COMAND infotainment software.
References
Configurations
Configuration 1 (hide)
AND |
|
History
07 Nov 2023, 03:18
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-134 | |
References |
|
|
Information
Published : 2020-08-27 16:15
Updated : 2023-12-10 13:27
NVD link : CVE-2020-16142
Mitre link : CVE-2020-16142
CVE.ORG link : CVE-2020-16142
JSON object : View
Products Affected
mercedes-benz
- c220
- comand
CWE
CWE-134
Use of Externally-Controlled Format String