CVE-2025-1675

Published Feb 25, 2025

Last updated a month ago

CVSS high 8.2

Overview

Description
The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.
Source
vulnerabilities@zephyrproject.org
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.2
Impact score
4.2
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Severity
HIGH

Weaknesses

vulnerabilities@zephyrproject.org
CWE-125

Social media

Hype score
Not currently trending

  1. 🚨 CVE-2025-1675 🔴 HIGH (8.2) 🏢 zephyrproject-rtos - Zephyr 🏗️ * 🔗 https://t.co/NFqVG4iKGb #CyberCron #VulnAlert https://t.co/sF7lVN1Oeq

    @cybercronai

    27 Feb 2025

    3 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References