CVE-2023-5184CWE-120CWE-195

Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver

High · published September 27, 2023

CVSS v3.1
7.0
EPSS
0%
Percentile
35.5
In the wild
Unconfirmed
What it is

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00422 · 35.5th percentile
Weaknesses
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'); CWE-195 · Signed to Unsigned Conversion Error
Published
2023-09-27T17:26Z
EPSS history
Timeline
  • 27 SEP 17:26Z
    Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver
    cvelistv5