CVE-2023-32155

CVE-2023-32155 is a local privilege escalation vulnerability affecting Tesla Model 3 vehicles and their firmware, specifically within the bcmdhd driver. This flaw, stemming from insufficient validation of user-supplied data, allows an attacker to write past the end of an allocated buffer. Exploiting this requires prior code execution on the Wi-Fi subsystem, but successful exploitation grants kernel-level arbitrary code execution. Rated with a CVSS score of 7.0 (High), there is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.