Integer Overflow Vulnerability in Volkswagen MIB3 Infotainment System
CVE-2023-28903
3.3LOW
Key Information:
- Vendor
- CVE Published:
- 28 June 2025
What is CVE-2023-28903?
An integer overflow vulnerability exists in the image processing binary of the Volkswagen MIB3 infotainment system. This flaw can be exploited by an attacker with local access to the vehicle, leading to a denial-of-service condition within the infotainment system. By manipulating data inputs, the attacker can disrupt the normal operations of the system, making it inaccessible to users.
Affected Version(s)
Volkswagen MIB3 infotainment system MIB3 OI MQB 0 <= 0304
References
CVSS V3.1
Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Artem Ivachev from PCA Cyber Security (PCAutomotive)