Vulnerabilidades de Zephyrproject-rtos
CVEs publicadas que afetam produtos de Zephyrproject-rtos: 28 registro(s), com severidade, exploração e correções.
CVE-2025-1675
Crítica · 9.1
CWE-125 25/02/2025
Out of bounds read in dns_copy_qname
The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.
CVE-2025-1674
Alta · 8.2
CWE-125 25/02/2025
Out of bounds read when unpacking DNS answers
A lack of input validation allows for out of bounds reads caused by malicious or malformed packets.
CVE-2025-1673
Alta · 8.2
CWE-125 25/02/2025
Out of bounds read when calling crc16_ansi and strlen in dns_validate_msg
A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.