The upcoming Pwn2Own Automotive contest has selected four head units, including the Sony XAV-AX8500, which offers various features such as Android Auto and Apple CarPlay. The XAV-AX8500's internals can be accessed by removing screws and metal plates, revealing three interconnected boards connected via flat flexible cables. The main board features an NXP i.MX 8M Mini processor with 4 Cortex-A53 cores and a low-power Cortex M4 for lighter workloads and security functions. The processor is supported by an 8Gb Nanya NT6AN256T32AV-J2 SDRAM chip and a 16GB Samsung KLMAG1JETD eMMC chip. The main board also includes a Rohm BD71847A PMIC, an unused socket, HDMI and USB-C inputs, and a Murata LBEE5ZZ1PJ radio module for Wi-Fi and Bluetooth operations. The underside of the main board features an Analog Devices ADV7482 video decoder and HDMI receiver chip. A smaller board next to the main board handles GPS, iData Link, and optional remote control input, using a Unicorecomm UM220-INS NL GPS module. A larger PCB beneath the main board handles power and various inputs and outputs, including audio and video, and features an ON Semiconductor LC88FC2H0A microcontroller. The blog post aims to provide enough information to kickstart vulnerability research against the XAV-AX8500, with future posts covering the threat landscape of the device. The Pwn2Own Automotive contest is set to take place in Tokyo in January 2025, where the security of IVI vendors' products will be put to the test.