Advisories · Technology

Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB.

Every CVE that names Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-28902 CVE record

CVSS 3.3 Low

Denial of Service via integer underflow in picserver
- Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB
- Memory corruption
Not analysed yet 28 Jun 2025
CVE-2023-28903 CVE record

CVSS 3.3 Low

Integer overflow in Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3…
- Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB
- Memory corruption
Not analysed yet 28 Jun 2025
CVE-2023-28904 CVE record

CVSS 5.2 Medium

Bypass of secure boot process
- Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB
- Memory corruption
Not analysed yet 28 Jun 2025
CVE-2023-28905 CVE record

CVSS 8.0 High

Heap buffer overflow in picserver
- Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB
- Memory corruption
Not analysed yet 28 Jun 2025
CVE-2023-28906 CVE record

CVSS 7.8 High

Command injection in networking service
- Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB
- Command injection
Not analysed yet 28 Jun 2025
CVE-2023-28907 CVE record

CVSS 6.7 Medium

A lack of access restrictions on internal memory regions
- Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB
- Broken access control
Not analysed yet 28 Jun 2025
CVE-2023-28908 CVE record

CVSS 5.4 Medium

Integer Overflow in Non-Fragmented Data Reception
- Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB
- Memory corruption
Not analysed yet 28 Jun 2025
CVE-2023-28909 CVE record

CVSS 8.0 High

Integer Overflow Leading to MTU Bypass
- Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB
- Memory corruption
Not analysed yet 28 Jun 2025
CVE-2023-28910 CVE record

CVSS 8.0 High

Disabled Abortion Flag
- Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB
- CWE-754
Not analysed yet 28 Jun 2025
CVE-2023-28911 CVE record

CVSS 6.5 Medium

Arbitrary Channel Disconnection Resulting in Denial of Service
- Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB
- CWE-20
Not analysed yet 28 Jun 2025
CVE-2023-28912 CVE record

CVSS 5.7 Medium

Cleartext Phonebook Information
- Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB
- Information disclosure
Not analysed yet 28 Jun 2025
CVE-2023-29113 CVE record

CVSS 6.3 Medium

A lack of access control in custom IPC mechanism
- Preh Car Connect GmbH (JOYNEXT GmbH) Volkswagen MIB3 infotainment system MIB3 OI MQB
- Broken access control
Not analysed yet 28 Jun 2025