CVE-2023-28903: Preh Car Connect GmbH Joynext GmbH Volkswagen MIB3 Infotainment System MIB3 Oi Mqb

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause a denial-of-service of the infotainment system.

Affected products

• Preh Car Connect GmbH Joynext GmbH Volkswagen MIB3 Infotainment System MIB3 Oi Mqb: up to and including 0304

Published 2025-06-28. Last modified 2026-06-17.