CVE-2025-2082 PoC — Tesla Model 3 输入验证错误漏洞

Source

Associated Vulnerability

Readme

# CVE-2025-2082 – Function Pointer Overwrite PoV (VCSEC-style)

This repository demonstrates a Proof of Vulnerability (PoV) simulating a critical memory corruption flaw inspired by [CVE-2025-2082](https://nvd.nist.gov/vuln/detail/CVE-2025-2082), discovered in Tesla's **VCSEC** (Vehicle Controller Security) component.

The vulnerability allows an attacker to overwrite a **function pointer** by exploiting a signed-to-unsigned integer conversion bug and improper memory bounds validation during a `memcpy()` operation.

---

## What This PoV Demonstrates

- How using a negative `startIndex` in a BLE message can cause memory to be written **before the start of a buffer**
- How that memory region may contain a critical **function pointer**
- How overwriting that pointer leads to arbitrary code execution

---

## Structure of the C Code

```c
struct VCSEC {
    void (*func_ptr)();              // Function pointer to be hijacked
    uint8_t g_cert_buffer[1024];     // Target buffer for certificate data
};

File Snapshot

 [4.0K]  /data/pocs/71c19766b372183dbe97d397ab32a70ed7ac8d66
├── [   0]  exploit.c
└── [1014]  README.md

0 directories, 2 files

Remarks