CVE-2025-32743: Connman

Critical severity, CVSS 9.0. EPSS: 0.5% chance of exploitation in the next 30 days.

In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an empty string when the TC (Truncated) bit is set in a DNS response. This allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code, because those lookup values lead to incorrect length calculations and incorrect memcpy operations.

Affected products

• Connman Connman: up to and including 1.44

Published 2025-04-10. Last modified 2026-06-17.