CVE-2025-32061 - Vulnerability Analysis

Overview

Bosch Infotainment ECU Bluetooth stack contains a stack-based buffer overflow caused by improper boundary validation of user-supplied data on the upper layer L2CAP channel, letting remote attackers execute code with root privileges, exploit requires sending a specific packet.

Severity & Score

Impact

Remote attackers can execute code with root privileges, leading to full system compromise.

Mitigation

Update to the latest version with proper boundary validation in the Bluetooth stack.

References

• http://i.blackhat.com/Asia-25/Asia-25-Evdokimov-Remote-Exploitation-of-Nissan-Leaf.pdf
• https://pcacybersecurity.com/resources/advisory/vulnerabilities-in-nissan-infotainment-manufactured-by-bosch
• https://www.nissan.co.uk/vehicles/new-vehicles/leaf.html

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner