CVE-2025-1675CWE-125
CVE-2025-1675
High · published February 25, 2025
What it is
The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.
The record
Technical detail
- CVSS v3.1
- 8.2 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00386 · 31.4th percentile
- Weakness
- CWE-125 · Out-of-bounds Read
- Published
- 2025-02-25T13:15Z
Affected products (1)
| Product | Versions | Fixed in |
|---|
| zephyrproject/zephyr | ≤ 4.0.0 | — |
References (1)
EPSS history
Timeline