Memory Copy Vulnerability in ConnMan's DNS Proxy Component

CVE-2025-32366

What is CVE-2025-32366?

A vulnerability exists in the DNS proxy component of ConnMan versions up to 1.44, specifically in the parse_rr function of dnsproxy.c. The issue arises due to a memcpy operation where the length parameter is derived from an RR RDLENGTH value. This can potentially lead to memory corruption and unpredictable behavior, compromising the security and reliability of network operations managed by ConnMan. Proper validation of the RDLENGTH before executing the memory copy is essential to mitigating this vulnerability.

References