Incident: Software Bug Causes Lexus and Toyota Infotainment System Malfunction

Published Date: 2016-06-08

Postmortem Analysis
Timeline 1. The software failure incident involving Carmaker Toyota and Lexus occurred on June 8, 2016, as reported in Article 45064.
System 1. GPS system 2. Climate control system 3. "Enform" infotainment system installed in 2014, 2015, and 2016 Lexus vehicles and the 2016 Toyota Land Cruiser 4. Hands-free phone functions 5. Front console radio systems 6. Subscription-based “Enform” system 7. Backup camera system 8. SiriusXM satellite radio 9. Traffic and weather service 10. Operating system glitches 11. Electronics in the vehicles
Responsible Organization 1. The software failure incident was caused by errant data broadcast by the company's traffic and weather service, affecting the Enform infotainment system in Lexus vehicles and the Toyota Land Cruiser [Article 45064].
Impacted Organization 1. Owners of 2014, 2015, and 2016 Lexus vehicles and the 2016 Toyota Land Cruiser [Article 45064] 2. Lexus and Toyota as companies [Article 45064]
Software Causes 1. Errant data broadcast by the company's traffic and weather service confounded vehicles' "Enform" infotainment system, causing it to continuously reboot itself [Article 45064].
Non-software Causes 1. Errant data broadcast by the company's traffic and weather service confounded the vehicles' "Enform" infotainment system, causing it to continuously reboot itself [Article 45064].
Impacts 1. The software bug caused malfunctions in vehicles' GPS, climate control, infotainment systems, and disabled hands-free phone functions, affecting Lexus vehicles and the Toyota Land Cruiser [Article 45064]. 2. The glitch led to the Enform infotainment system continuously rebooting itself, rendering it unusable and drawing complaints from drivers [Article 45064]. 3. Owners had to force a reset of their vehicle's computer by disconnecting the 12-volt battery for at least 5 minutes or bring their vehicles to a Lexus dealer for a system reset [Article 45064]. 4. Lexus faced a backlash on social media with complaints flooding their accounts, leading to customer inconvenience [Article 45064].
Preventions 1. Implementing thorough testing procedures before deploying software updates [45064] 2. Conducting more extensive quality assurance checks on software changes affecting critical systems like GPS and infotainment [45064] 3. Enhancing monitoring systems to quickly detect anomalies in data streams that could lead to system malfunctions [45064]
Fixes 1. Owners should force a reset of their vehicle’s computer by disconnecting its 12-volt battery for at least 5 minutes [45064]. 2. Owners can also bring their vehicles to a Lexus dealer to reset their system [45064].
References 1. Carmaker Toyota and its luxury brand Lexus 2. Lexus social media accounts 3. Company spokesman Moe Durand 4. Consumer Report’s annual auto survey 5. Neil Steinkamp, managing director at Stout Risius Ross

Software Taxonomy of Faults

Category Option Rationale
Recurring one_organization, multiple_organization (a) The software failure incident related to Lexus and Toyota's malfunctioning infotainment system due to a software bug has happened within the same organization. The incident caused the Enform infotainment system to continuously reboot itself, rendering it unusable in certain Lexus vehicles and the Toyota Land Cruiser [45064]. (b) The incident highlights the increasing trend in the automotive industry where car companies are remotely updating their products to fix glitches and update software, similar to how smartphone or software companies operate. This indicates that software-related issues in vehicles are not unique to a single organization but are becoming more common across the industry [45064].
Phase (Design/Operation) design, operation (a) The software failure incident in the articles was related to the design phase. The malfunction in vehicles' GPS, climate control, infotainment systems, and hands-free phone functions was caused by a software bug introduced by errant data broadcast by the company's traffic and weather service. This confounded the Enform infotainment system in Lexus vehicles and the Toyota Land Cruiser, rendering it continuously reboot itself and unusable [45064]. (b) The software failure incident was also related to the operation phase. Customers experienced the impact of the software bug as their vehicles' systems were affected, leading to complaints flooding Lexus's social media accounts. The company had to provide instructions for owners to reset their vehicle's computer by disconnecting the battery or bringing the vehicle to a dealer for a system reset, indicating operational issues faced by the users [45064].
Boundary (Internal/External) within_system (a) The software failure incident reported in the articles was primarily within the system. The malfunction in vehicles' GPS, climate control, infotainment systems, and hands-free phone functions was caused by a software bug within the company's traffic and weather service data broadcast [45064]. The glitch led to the continuous rebooting of the subscription-based "Enform" system, rendering it unusable and drawing complaints from drivers. The company had to rush to fix the bug by offering solutions like forcing a reset of the vehicle's computer and bringing the vehicles to dealers for system resets. The incident highlights how cars, like other technological devices, are becoming more reliant on software and are susceptible to software glitches originating from within the system.
Nature (Human/Non-human) non-human_actions, human_actions (a) The software failure incident in this case was primarily due to non-human actions. The malfunction was caused by errant data broadcast by the company's traffic and weather service, which confounded the vehicles' infotainment system, leading to continuous reboots and rendering it unusable [45064]. (b) Human actions were involved in the resolution of the software failure incident. The company advised owners to force a reset of their vehicle's computer by disconnecting the 12-volt battery for at least 5 minutes or bring their vehicles to a Lexus dealer for a system reset. Additionally, the company halted the offending data stream and offered fixes for the bug, showing human intervention in addressing the issue [45064].
Dimension (Hardware/Software) software (a) The software failure incident reported in the articles was primarily due to a software bug that caused malfunctions in vehicles' GPS, climate control, infotainment systems, and hands-free phone functions. The glitch was caused by errant data broadcast by the company's traffic and weather service, which affected the Enform infotainment system in Lexus vehicles and the Toyota Land Cruiser. The bug made the Enform system continuously reboot itself, rendering it unusable [Article 45064]. (b) The software failure incident was specifically attributed to a software bug that affected the Enform infotainment system in Lexus vehicles and the Toyota Land Cruiser. The glitch caused malfunctions in various systems, including GPS, climate control, infotainment, and hands-free phone functions. The bug was remedied by forcing a reset of the vehicle's computer or bringing the vehicle to a dealer for a system reset [Article 45064].
Objective (Malicious/Non-malicious) non-malicious (a) The software failure incident described in the articles is non-malicious. It was caused by a software bug in the company's traffic and weather service that led to a malfunction in vehicles' GPS, climate control, infotainment systems, and hands-free phone functions [45064]. The glitch resulted in the Enform infotainment system continuously rebooting itself, rendering it unusable and causing inconvenience to drivers. The company rushed to fix the bug and offered solutions to reset the system, indicating that the failure was not due to malicious intent but rather a technical issue.
Intent (Poor/Accidental Decisions) accidental_decisions The software failure incident reported in the articles seems to align more with the category of accidental_decisions rather than poor_decisions. The incident was caused by an errant data broadcast by the company's traffic and weather service, which led to the malfunction of the Enform infotainment system in Lexus vehicles and the Toyota Land Cruiser [45064]. This issue was not a result of a deliberate poor decision but rather an unintended mistake that caused the system to continuously reboot itself, rendering it unusable for drivers. The company rushed to fix the bug and offered solutions to customers affected by the glitch, indicating that the failure was more of an accidental occurrence rather than a result of poor decisions.
Capability (Incompetence/Accidental) accidental (a) The software failure incident in the articles seems to be more related to accidental factors rather than development incompetence. The incident was caused by errant data broadcast by the company's traffic and weather service, which led to the malfunction in vehicles' GPS, climate control, infotainment systems, and hands-free phone functions [45064]. This indicates that the failure was not due to a lack of professional competence during development but rather an accidental introduction of problematic data that caused the glitch.
Duration temporary The software failure incident reported in Article 45064 was temporary. The incident was caused by errant data broadcast by the company's traffic and weather service, which affected the Enform infotainment system in Lexus vehicles and the Toyota Land Cruiser. The glitch made the Enform system continuously reboot itself, rendering it unusable. The company rushed to fix the bug and provided solutions for owners to reset their vehicle's computer, either by disconnecting the battery or visiting a Lexus dealer. The company also halted the offending data stream overnight to address the issue [45064].
Behaviour crash, omission, value, other (a) crash: The software failure incident in the articles can be categorized as a crash. The malfunction in vehicles' GPS, climate control, infotainment systems, and hands-free phone functions caused the systems to continuously reboot themselves, rendering them unusable [45064]. (b) omission: The software failure incident can also be categorized as an omission. The glitch caused the omission of key functions such as the backup camera and hands-free phone functions in the affected vehicles [45064]. (c) timing: The software failure incident does not align with the timing category as there is no indication that the system performed its intended functions too late or too early [45064]. (d) value: The software failure incident can be categorized as a value failure. The glitch caused the system to perform its intended functions incorrectly, leading to the malfunction of various features in the vehicles [45064]. (e) byzantine: The software failure incident does not align with the byzantine category as there is no mention of inconsistent responses or interactions by the system [45064]. (f) other: The other behavior exhibited by the software failure incident is the need for a manual reset or intervention by the users to resolve the issue. Owners were instructed to force a reset of their vehicle's computer by disconnecting the 12-volt battery for at least 5 minutes or bring their vehicles to a dealer for a system reset, indicating a need for manual intervention to address the malfunction [45064].

IoT System Layer

Layer Option Rationale
Perception None None
Communication None None
Application None None

Other Details

Category Option Rationale
Consequence property, non-human (d) property: People's material goods, money, or data was impacted due to the software failure The software failure incident caused malfunctions in vehicles' GPS, climate control, infotainment systems, and hands-free phone functions in Lexus and Toyota vehicles. This glitch rendered the subscription-based "Enform" system continuously reboot itself, making it unusable for drivers [45064]. Customers experienced a nationwide screen blackout in their cars due to the satellite issue, leading to complaints on social media [45064]. The company advised owners to reset their vehicle's computer by disconnecting the 12-volt battery for at least 5 minutes or bring their vehicles to a Lexus dealer for a system reset [45064].
Domain transportation The software failure incident reported in the articles is related to the transportation industry. The incident affected vehicles' GPS, climate control, infotainment systems, and hands-free phone functions in Lexus and Toyota vehicles [Article 45064]. The glitch caused the Enform infotainment system to continuously reboot itself, rendering it unusable and drawing complaints from drivers. The fix involved resetting the vehicle's computer system, either by disconnecting the battery or bringing the vehicle to a dealer for a reset. This incident highlights how modern cars are becoming more like rolling computers with complex software systems that can experience glitches and require remote updates to address issues.

Sources

Back to List