Bosch Infotainment System ECU 283C30861E Bluetooth Stack stack-based overflow

Summaryinfo

A vulnerability, which was classified as critical, has been found in Bosch Infotainment System ECU 283C30861E. Affected by this vulnerability is an unknown functionality of the component Bluetooth Stack. Performing a manipulation results in stack-based overflow. This vulnerability is reported as CVE-2025-32061. The attacker must have access to the local network to execute the attack. Moreover, an exploit is present.

Detailsinfo

A vulnerability was found in Bosch Infotainment System ECU 283C30861E. It has been classified as critical. This affects an unknown functionality of the component Bluetooth Stack. The manipulation with an unknown input leads to a stack-based overflow vulnerability. CWE is classifying the issue as CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of proper boundary validation of user-supplied data, which can result in a stack-based buffer overflow when receiving a specific packet on the established upper layer L2CAP channel. An attacker can leverage this vulnerability to obtain remote code execution on the Infotainment ECU with root privileges. First identified on Nissan Leaf ZE1 manufactured in 2020.

The weakness was disclosed with PCA Cyber Security Assessment Team. The advisory is shared at nissan.co.uk. This vulnerability is uniquely identified as CVE-2025-32061 since 04/03/2025. The exploitability is told to be easy. The attack can only be done within the local network. No form of authentication is needed for exploitation. Technical details are unknown but a public exploit is available.

The exploit is shared for download at i.blackhat.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-206903). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Bosch

Name

• Infotainment System ECU

Version

• 283C30861E

License

• commercial

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion