Bosch Infotainment System ECU 283C30861E on Linux Bluetooth Stack stack-based overflow

Summaryinfo

A vulnerability classified as critical was found in Bosch Infotainment System ECU 283C30861E on Linux. Affected is an unknown function of the component Bluetooth Stack. Such manipulation leads to stack-based overflow. This vulnerability is documented as CVE-2025-32059. The attack requires being on the local network. Additionally, an exploit exists.

Detailsinfo

A vulnerability was found in Bosch Infotainment System ECU 283C30861E on Linux and classified as critical. Affected by this issue is an unknown function of the component Bluetooth Stack. The manipulation with an unknown input leads to a stack-based overflow vulnerability. Using CWE to declare the problem leads to CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). Impacted is confidentiality, integrity, and availability. CVE summarizes:

The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of proper boundary validation of user-supplied data, which can result in a stack-based buffer overflow when receiving a specific packet on the established upper layer L2CAP channel. An attacker can leverage this vulnerability to obtain remote code execution on the Infotainment ECU with root privileges. First identified on Nissan Leaf ZE1 manufactured in 2020.

The weakness was released with PCA Cyber Security Assessment Team. The advisory is shared for download at nissan.co.uk. This vulnerability is handled as CVE-2025-32059 since 04/03/2025. The exploitation is known to be easy. The attack needs to approached within the local network. No form of authentication is required for exploitation. Technical details are unknown but a public exploit is available.

The exploit is available at i.blackhat.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-206904). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Bosch

Name

• Infotainment System ECU

Version

• 283C30861E

License

• commercial

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion