CVE-2025-32059

Description

The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of proper boundary validation of user-supplied data, which can result in a stack-based buffer overflow when receiving a specific packet on the established upper layer L2CAP channel. An attacker can leverage this vulnerability to obtain remote code execution on the Infotainment ECU with root privileges. First identified on Nissan Leaf ZE1 manufactured in 2020.

PUBLISHED Reserved 2025-04-03 | Published 2026-02-15 | Updated 2026-02-17 | Assigner ASRG

Problem types

CWE-121: Stack-based Buffer Overflow

Product status

Credits

Mikhail Evdokimov (PCA Cyber Security Assessment Team) finder

References

www.nissan.co.uk/vehicles/new-vehicles/leaf.html product

i.blackhat.com/...mov-Remote-Exploitation-of-Nissan-Leaf.pdf media-coverage

pcacybersecurity.com/...n-infotainment-manufactured-by-bosch third-party-advisory

cve.org (CVE-2025-32059)

nvd.nist.gov (CVE-2025-32059)

Download JSON