CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.0. It may lead to a denial-of-service condition.
CVE
CVE-2025-32743
Severity
CRITICAL
CVSS
9
EPSS
0.48%
Original NVD Description
In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an empty string when the TC (Truncated) bit is set in a DNS response. This allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code, because those lookup values lead to incorrect length calculations and incorrect memcpy operations.