Tesla Model_3_firmware
11 CVEs affecting Tesla Model_3_firmware. Latest disclosed: 2025-04-30. Critical: 0, High: 8.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-32156 | High | 8.8 | 2024-05-03 | Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on aff… |
CVE-2019-9977 | High | 8.8 | 2019-03-24 | The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows attackers to trigger firmware code executio… |
CVE-2022-42431 | High | 7.8 | 2023-03-29 | This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged co… |
CVE-2022-42430 | High | 7.8 | 2023-03-29 | This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged co… |
CVE-2025-2082 | High | 7.5 | 2025-04-30 | Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on aff… |
CVE-2023-32157 | High | 7.5 | 2024-05-03 | Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute… |
CVE-2022-27948 | High | 7.2 | 2022-03-27 | Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of approximately one hu… |
CVE-2023-32155 | High | 7.0 | 2024-05-03 | Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected… |
CVE-2020-15912 | Medium | 6.5 | 2020-07-23 | Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed P… |
CVE-2022-3093 | Medium | 6.4 | 2023-03-29 | This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles. Authentication is not required to exploit this vulnerability… |
CVE-2022-37709 | Medium | 5.3 | 2022-09-16 | Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. Tesla Model 3's Phone Key authenticatio… |