Zephyrproject-rtos vulnerabilities
Published CVEs affecting Zephyrproject-rtos products: 28 record(s), with severity, exploitation and fixes.
CVE-2025-1675
Critical · 9.1
CWE-125 Feb 25, 2025
Out of bounds read in dns_copy_qname
The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.
CVE-2025-1674
High · 8.2
CWE-125 Feb 25, 2025
Out of bounds read when unpacking DNS answers
A lack of input validation allows for out of bounds reads caused by malicious or malformed packets.
CVE-2025-1673
High · 8.2
CWE-125 Feb 25, 2025
Out of bounds read when calling crc16_ansi and strlen in dns_validate_msg
A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.