CVE-2025-1675

The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - vulnerabilities@zephyrproject.org

Published

2025-02-25

Last modified

2026-10-13

Weaknesses

CWE-125

Affected products

• Zephyr (Zephyrproject)
• Zephyr (Zephyrproject-rtos)

References

• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-2m84-5hfw-m8v4