CVE-2025-32062 - Vulnerability Analysis

Overview

Alps Alpine Bluetooth stack in Bosch Infotainment ECU contains a stack-based buffer overflow caused by improper boundary validation of user-supplied data on L2CAP channel, letting remote attackers execute code with root privileges.

Severity & Score

Impact

Remote attackers can execute code with root privileges, leading to full system compromise of the Infotainment ECU.

Mitigation

Update to the latest version of the Bluetooth stack or Bosch Infotainment ECU firmware.

References

• http://i.blackhat.com/Asia-25/Asia-25-Evdokimov-Remote-Exploitation-of-Nissan-Leaf.pdf
• https://pcacybersecurity.com/resources/advisory/vulnerabilities-in-nissan-infotainment-manufactured-by-bosch
• https://www.nissan.co.uk/vehicles/new-vehicles/leaf.html

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Feb 16, 2026

🟠 CVE-2025-32062 - High (8.8) The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of proper boundary validation of user-supplied data, which can result in a stack-based buff... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-32062/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner