CVE-2025-32058 Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECU

The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication. RH850 is connected to infotainment over the INC interface through a custom protocol. There is a vulnerability during processing requests of this protocol on the V850 side which allows an attacker with code...

CVE-2025-32058

CVE-2025-32058 is evidenced in connected PT Security reports as a stack overflow in the v850 core when handling CBR in the Nissan Leaf ZE1 2020 infotainment ECU software stack. Root cause: improper stack handling in the v850 processing path. Documented impact: potential remote code execution (RCE...