CVE-2024-6443CWE-125CWE-787
zephyr: out-of-bound read in utf8_trunc
Medium · published October 4, 2024
What it is
In utf8_trunc in zephyr/lib/utils/utf8.c, last_byte_p can point to one byte before the string pointer if the string is empty.
The record
Technical detail
- CVSS v3.1
- 6.3 · MEDIUM
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00608 · 48.5th percentile
- Weaknesses
- CWE-125 · Out-of-bounds Read; CWE-787 · Out-of-bounds Write
- Published
- 2024-10-04T05:56Z
EPSS history
Timeline