CVE-2025-32743 - CVE House
Back to Database
Status published Critical CVE-2025-32743

In ConnMan through 1.44, the lookup string in ns_resolv in...

Vulnerability Description

In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an empty string when the TC (Truncated) bit is set in a DNS response. This allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code, because those lookup values lead to incorrect length calculations and incorrect memcpy operations.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-32743

Credits & Attribution

No credits recorded in the NVD database.

References

More from ConnMan

View All →
CVE-2025-32366
In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy...
Medium 4.8

Affected Vendor

Affected Software

ConnMan
Vulnerable Versions:
0

Timeline

Official Publish: April 10th, 2025
Last Modified: April 10th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-392

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.