CVE-2025-59605: Out-of-bounds Write in HLOS

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Configuration

   Implement proper bounds checking for device identifier strings in HLOS. Enforce the expected maximum length and either reject or safely truncate inputs that exceed that length to prevent out-of-bounds writes (memory corruption).

   HLOS device identifier length handling = enforce expected maximum length / reject or safely truncate inputs that exceed the limit
2. Compensating control

   Until a code fix is available, restrict or block untrusted sources from sending device identifier strings to the HLOS interface (for example using network ACLs, firewall rules, or a WAF) to reduce exposure to malformed overly-long identifiers.

Event History

Frequently Asked Questions