CVE-2025-1673

High CVSS: 8.2

A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.

Vendor

Zephyrproject

Product

Zephyr

CWE

CWE-125

Yayın Tarihi

2025-02-25 07:15:18

Güncelleme

2025-02-28 01:51:41

Source Identifier

vulnerabilities@zephyrproject.org

KEV Date Added

Kategoriler

CWE-125 Zephyr HIGH Zephyrproject 2025

Referanslar

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jjhx-rrh4-j8mx

Benzer Kayıtlar

High

CVE-2026-1679

The eswifi socket offload driver copies user-provided payloads into a fixed buffer without checking available space; ove…

Medium

CVE-2026-4179

Issues in stm32 USB device driver (drivers/usb/device/usb_dc_stm32.c) can lead to an infinite while loop.

Low

CVE-2026-0849

Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver…

Critical

CVE-2026-1678

dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. As the buffer grows, the cac…

High

CVE-2025-10458

Parameters are not validated or sanitized, and are later used in various internal operations.

High

CVE-2025-7403

Unsafe handling in bt_conn_tx_processor causes a use-after-free, resulting in a write-before-zero. The written 4 bytes a…