/
vendors:Comma.ai × limpar

Resultados

2 casos · pág. 1/1

theregister.com · medium

Auto tech startup IQ.Lvbs alleges hack attempts to steal NovaSpark model traced to rival Comma.ai IP address

Automotive AI startup IQ.Lvbs claims that between October 7 and 14, 2026 it faced repeated attempts to steal its NovaSpark driving model, access users' devices and private driving files, and exploit its sign-in system. The company says the first requests came from an IP address assigned to Comma.ai Inc., a rival whose camera hardware Nova…

yokai.hakaisecurity.io · high

CVE-2026-12191: Insecure pickle deserialization in comma.ai openpilot modeld enables root RCE on comma 3X

The Hakai Yokai Research Team disclosed CVE-2026-12191, an insecure deserialization flaw (CWE-502) in openpilot, the open-source Level 2 driver assistance system from comma.ai that supports over 275 vehicle models. The modeld process calls Python pickle.load() / pickle.loads() on model and metadata files with no validation, signature or h…