CVE-2024-6443

In utf8_trunc in zephyr/lib/utils/utf8.c, last_byte_p can point to one byte before the string pointer if the string is empty.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - vulnerabilities@zephyrproject.org

Published

2024-10-04

Last modified

2024-10-04

Weaknesses

CWE-125, CWE-787

Affected products

• Zephyr (Zephyrproject)
• Zephyr (Zephyrproject-rtos)

References

• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gg46-3rh2-v765