PCA Cyber Security has reported to Cyber Security News that the attack utilizes a sophisticated exploitation chain, which combines four distinct vulnerabilities that can be executed with minimal user interaction, necessitating at most a single click from the targeted user. The exploit chain requires minimal user interaction and poses severe risks to in-vehicle infotainment (IVI) systems, potentially allowing attackers to access GPS coordinates, audio recordings, personal data, and perform lateral movement to critical vehicle electronic control units (ECUs). This sophisticated attack vector enables remote code execution (RCE) on millions of devices across automotive and other industries through a series of memory corruption and logical vulnerabilities. This memory corruption vulnerability occurs when the system fails to validate object existence before performing operations, allowing attackers to manipulate freed memory regions and execute arbitrary code. A new and critical security threat, PerfektBlue, has emerged, targeting OpenSynergy’s BlueSDK Bluetooth framework and posing an unprecedented risk to the automotive industry.
This Cyber News was published on cybersecuritynews.com. Publication date: Thu, 10 Jul 2025 11:50:27 +0000