CVE-2023-4263CWE-120CWE-121

Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver

High · published October 13, 2023

CVSS v3.1
7.6
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00533 · 44.2th percentile
Weaknesses
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'); CWE-121 · Stack-based Buffer Overflow
Published
2023-10-13T20:42Z
EPSS history
Timeline
  • 13 OCT 20:42Z
    Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver
    cvelistv5