Mercedes-Benz NTG6 Head Unit Boost Library Vulnerability Leading to Null Pointer Dereference

A vulnerability exists in the Mercedes-Benz NTG6 head unit, specifically within the user profile import and export functionality over USB. This issue arises from the use of a serialized archive format compatible with the Boost library, which contains a known vulnerability allowing for a null pointer dereference.

Impact

Exploitation of this vulnerability causes the 'UserData' service to crash during the import of profile data, freezing the system until a hard reset of the Electronic Control Unit (ECU) is performed.

Reproduction

The vulnerability can be reproduced by exporting user profile data to a USB drive, which includes files that, when decoded, exploit a heap buffer overflow. This crafted data can then be imported back into the head unit, triggering the vulnerability.