PT-2025-15637 · Bosch · Infotainment System Ecu

Mikhail Evdokimov · Published 2025-04-08 · Updated 2026-02-20 · CVE-2025-32059

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nissan Leaf versions manufactured in 2020 (affected versions not specified)

Description A flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue is due to insufficient boundary validation of user-supplied data, leading to a stack-based buffer overflow when receiving a specific packet on the established upper layer L2CAP channel. An attacker can exploit this to achieve remote code execution on the Infotainment ECU with root privileges. The vulnerability was first identified on the Nissan Leaf ZE1 manufactured in 2020. Exploitation involves the Bluetooth Hands-Free Profile (HFP).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2025-32059

Affected Products

Infotainment System Ecu

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2025-32059 · Security Note
• https://twitter.com/CveFindCom/status/2023792421528580244 · Twitter Post
• https://twitter.com/NewsNerdie/status/2023299074049314921 · Twitter Post
• https://pcacybersecurity.com/resources/advisory/vulnerabilities-in-nissan-infotainment-manufactured-by-bosch · Note
• https://twitter.com/TheHackerWire/status/2023552823867347283 · Twitter Post
• https://nissan.co.uk/vehicles/new-vehicles/leaf.html · Note
• https://twitter.com/VulmonFeeds/status/2023016689357427144 · Twitter Post
• http://i.blackhat.com/Asia-25/Asia-25-Evdokimov-Remote-Exploitation-of-Nissan-Leaf.pdf · Note
• https://t.me/purp_sec/618 · Telegram Post
• https://twitter.com/cracbot/status/2024801251649827155 · Twitter Post
• https://t.me/CVEtracker/44751 · Telegram Post
• https://t.me/cveNotify/152053 · Telegram Post
• https://twitter.com/autumn_good_35/status/1909607881265361279 · Twitter Post
• https://twitter.com/CVEnew/status/2022994290561941858 · Twitter Post
• https://twitter.com/DevSecOpsAI/status/1931750650569728495 · Twitter Post