by Kastro
Paper/Archive/CVE-2025-1675

CVE-2025-1675

zephyrproject-rtos Zephyr — Out of bounds read in dns_copy_qname

EPSS 0.4%CVSS 9.1
critical.is priorityof 100
34
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 32.6.326 × 206.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.

Affected

ProductAffectedFixed inSource
Zephyr< 3.7.23.7.2CNA
Zephyr4.0.0 – < 4.1.04.1.0CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
zephyr (CNA)8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refgithub.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-2m84-5hfw-m8v4