CVE-2025-1675

High CVSS: 8.2

The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.

Vendor

Zephyrproject

Product

Zephyr

CWE

CWE-125

Yayın Tarihi

2025-02-25 08:15:30

Güncelleme

2025-03-03 16:51:56

Source Identifier

vulnerabilities@zephyrproject.org

KEV Date Added

Kategoriler

CWE-125 Zephyr HIGH Zephyrproject 2025

Referanslar

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-2m84-5hfw-m8v4

Benzer Kayıtlar

High

CVE-2026-1679

The eswifi socket offload driver copies user-provided payloads into a fixed buffer without checking available space; ove…

Medium

CVE-2026-4179

Issues in stm32 USB device driver (drivers/usb/device/usb_dc_stm32.c) can lead to an infinite while loop.

Low

CVE-2026-0849

Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver…

Critical

CVE-2026-1678

dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. As the buffer grows, the cac…

High

CVE-2025-10458

Parameters are not validated or sanitized, and are later used in various internal operations.

High

CVE-2025-7403

Unsafe handling in bt_conn_tx_processor causes a use-after-free, resulting in a write-before-zero. The written 4 bytes a…