CVE-2025-32061 HIGH

CVE-2025-32061: Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU

Vendor Bosch
Product Infotainment system ECU
Weakness CWE-121
Published February 15, 2026
Last update February 17, 2026
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue results from the lack of proper boundary validation of user-supplied data, which can result in a stack-based buffer overflow when receiving a specific packet on the established upper layer L2CAP channel. An attacker can leverage this vulnerability to obtain remote code execution on the Infotainment ECU with root privileges. First identified on Nissan Leaf ZE1 manufactured in 2020.

Key dates

02Disclosure timeline

February 15, 2026 CVE published
February 17, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-32059 Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU CVE-2024-4237 Tenda AX1806 execCommand R7WebsSecurityHandler stack-based overflow CVE-2024-11800 Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-9357 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 langSwitchByBBS stack-based overflow CVE-2025-7544 Tenda AC1206 setMacFilterCfg formSetMacFilterCfg stack-based overflow