https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:57:20 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-249411 EUVD-2026-249411 https://cve.radiocsirt.org/vuln/euvd-2026-249411 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7020 <p>An incorrect encryption implementation vulnerability exists in the system log dump feature of BYD&#39;s DiLink 3.0 OS (e.g. in the model ATTO3). An attacker with physical access to the vehicle can bypass the encryption of log dumps on the In-Vehicle Infotainment (IVI) unit&#39;s storage. This allows the attacker to access and read system logs containing sensitive data, including personally identifiable information (PII) and location data.</p> <p>This vulnerability was introduced in a patch intended to fix CVE-2024-54728.</p> <p>An incorrect encryption implementation vulnerability exists in the system log dump feature of BYD&#39;s DiLink 3.0 OS (e.g. in the model ATTO3). An attacker with physical access to the vehicle can bypass the encryption of log dumps on the In-Vehicle Infotainment (IVI) unit&#39;s storage. This allows the attacker to access and read system logs containing sensitive data, including personally identifiable information (PII) and location data.</p> <p>This vulnerability was introduced in a patch intended to fix CVE-2024-54728.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-7020 https://cve.radiocsirt.org/vuln/ghsa-92rp-4wfm-mqg4 <p>An incorrect encryption implementation vulnerability exists in the system log dump feature of BYD&#39;s DiLink 3.0 OS (e.g. in the model ATTO3). An attacker with physical access to the vehicle can bypass the encryption of log dumps on the In-Vehicle Infotainment (IVI) unit&#39;s storage. This allows the attacker to access and read system logs containing sensitive data, including personally identifiable information (PII) and location data.</p> <p>This vulnerability was introduced in a patch intended to fix CVE-2024-54728.</p> <p>An incorrect encryption implementation vulnerability exists in the system log dump feature of BYD&#39;s DiLink 3.0 OS (e.g. in the model ATTO3). An attacker with physical access to the vehicle can bypass the encryption of log dumps on the In-Vehicle Infotainment (IVI) unit&#39;s storage. This allows the attacker to access and read system logs containing sensitive data, including personally identifiable information (PII) and location data.</p> <p>This vulnerability was introduced in a patch intended to fix CVE-2024-54728.</p> https://cve.radiocsirt.org/vuln/ghsa-92rp-4wfm-mqg4