Bluetooth security flaws could affect thousands of Mercedes, Volkswagen, Skoda cars - here's what we know

• Researchers find four flaws in the BlueSDK Bluetooth stack
• They can be chained into the "PerfektBlue" RCE attack
• Multiple car vendors are allegedly affected

Security researchers have discovered four vulnerabilities in the BlueSDK Bluetooth stack which could be chained together for remote code execution (RCE) attacks.

This stack is used by multiple vendors across different industries - including car manufacturing giants Mercedes, Volkswagen, and Skoda (and possibly others).

In theory, a threat actor could abuse these flaws to connect to a car’s infotainment system, and from there - eavesdrop on conversations, grab the contacts list from connected devices, track GPS coordinates, and more.